Framework mapping
MITRE ATT&CK® Enterprise mapping
Tactics: Reconnaissance
Platforms: PRE
Relationship: defensive exposure-management context
Open the official ATT&CK object ↗Editorial mapping of an inherited BMC article to related Enterprise ATT&CK behavior, control, evidence, architecture, or risk context. Mapping roles state the relationship and do not assert equivalence unless labeled direct.
MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. Bare Metal Cyber is not affiliated with or endorsed by MITRE.
What it means
The attack surface changes as organizations deploy cloud resources, domains, applications, vendors, remote access, and temporary environments. Discovery must be connected to ownership and remediation.
Why it matters
Unknown and unnecessary exposure cannot be governed effectively, even when individual systems are well configured.
Practical focus
- Discover external and internal exposure continuously
- Map assets to owners and business purpose
- Remove unused services, domains, and accounts
- Prioritize exploitable paths to important assets
Common mistakes
- Treating a one-time inventory as current
- Measuring only internet-facing IP addresses
- Finding exposure without assigning remediation ownership
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: