Techniques › T1587.003 › AN1976
AN1976 Analytic 1976
PRE · attack.mitre.org · ATT&CK Enterprise v19.2
<p>Consider use of services that may aid in the tracking of certificates in use on sites across the Internet. In some cases it may be possible to pivot on known pieces of certificate information to uncover other adversary infrastructure. Detection efforts may be focused on related behaviors, such as Web Protocols , Asymmetric Cryptography , and/or Install Root Certificate .</p>
- Detects
- T1587.003 Digital Certificates
- Part of
- DET0844 Detection of Digital Certificates
Log sources and channels
Exactly as MITRE states them in x_mitre_log_source_references. Where a channel is vague, it is vague in the source; kevmap does not tidy it.
| Log source | Channel | Data component |
|---|---|---|
| Internet Scan | None | DC0104 Response Content |