Cyber Wiki Learning Path
MITRE ATT&CK®: Resource Development
Explore all active Enterprise ATT&CK v19.2 techniques and sub-techniques associated with the Resource Development objective, with defensive explanations and linked BMC learning resources.
Recommended Sequence
50 connected entries
Acquire Access (T1650)
Acquire Access (T1650) is an Enterprise ATT&CK technique associated with Resource Development. This Bare Metal Cyber profile explains the behavior in plain language and focuses on evidence, detection, defensive design, response, and safe learning.
ATT&CK technique profile · IntermediateAcquire Infrastructure (T1583)
An operator obtains domains, servers, cloud resources, virtual private servers, certificates, or other infrastructure used to stage or conduct malicious activity.
ATT&CK sub-technique profile · AdvancedArtificial Intelligence (T1588.007)
Artificial Intelligence (T1588.007) is an Enterprise ATT&CK sub-technique under Obtain Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedAudio-Visual Content (T1683.002)
Audio-Visual Content (T1683.002) is an Enterprise ATT&CK sub-technique under Generate Content. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedBotnet (T1583.005)
Botnet (T1583.005) is an Enterprise ATT&CK sub-technique under Acquire Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedBotnet (T1584.005)
Botnet (T1584.005) is an Enterprise ATT&CK sub-technique under Compromise Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedCloud Accounts (T1585.003)
Cloud Accounts (T1585.003) is an Enterprise ATT&CK sub-technique under Establish Accounts. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedCloud Accounts (T1586.003)
Cloud Accounts (T1586.003) is an Enterprise ATT&CK sub-technique under Compromise Accounts. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedCode Signing Certificates (T1587.002)
Code Signing Certificates (T1587.002) is an Enterprise ATT&CK sub-technique under Develop Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedCode Signing Certificates (T1588.003)
Code Signing Certificates (T1588.003) is an Enterprise ATT&CK sub-technique under Obtain Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK technique profile · IntermediateCompromise Accounts (T1586)
Compromise Accounts (T1586) is an Enterprise ATT&CK technique associated with Resource Development. This Bare Metal Cyber profile explains the behavior in plain language and focuses on evidence, detection, defensive design, response, and safe learning.
ATT&CK technique profile · IntermediateCompromise Infrastructure (T1584)
Compromise Infrastructure (T1584) is an Enterprise ATT&CK technique associated with Resource Development. This Bare Metal Cyber profile explains the behavior in plain language and focuses on evidence, detection, defensive design, response, and safe learning.
ATT&CK sub-technique profile · AdvancedDNS Server (T1583.002)
DNS Server (T1583.002) is an Enterprise ATT&CK sub-technique under Acquire Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedDNS Server (T1584.002)
DNS Server (T1584.002) is an Enterprise ATT&CK sub-technique under Compromise Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK technique profile · IntermediateDevelop Capabilities (T1587)
An operator creates malware, exploits, certificates, tools, or other capabilities tailored to the intended operation.
ATT&CK sub-technique profile · AdvancedDigital Certificates (T1587.003)
Digital Certificates (T1587.003) is an Enterprise ATT&CK sub-technique under Develop Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedDigital Certificates (T1588.004)
Digital Certificates (T1588.004) is an Enterprise ATT&CK sub-technique under Obtain Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedDomains (T1583.001)
Domains (T1583.001) is an Enterprise ATT&CK sub-technique under Acquire Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedDomains (T1584.001)
Domains (T1584.001) is an Enterprise ATT&CK sub-technique under Compromise Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedDrive-by Target (T1608.004)
Drive-by Target (T1608.004) is an Enterprise ATT&CK sub-technique under Stage Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedEmail Accounts (T1585.002)
Email Accounts (T1585.002) is an Enterprise ATT&CK sub-technique under Establish Accounts. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedEmail Accounts (T1586.002)
Email Accounts (T1586.002) is an Enterprise ATT&CK sub-technique under Compromise Accounts. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK technique profile · IntermediateEstablish Accounts (T1585)
Establish Accounts (T1585) is an Enterprise ATT&CK technique associated with Resource Development. This Bare Metal Cyber profile explains the behavior in plain language and focuses on evidence, detection, defensive design, response, and safe learning.
ATT&CK sub-technique profile · AdvancedExploits (T1587.004)
Exploits (T1587.004) is an Enterprise ATT&CK sub-technique under Develop Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedExploits (T1588.005)
Exploits (T1588.005) is an Enterprise ATT&CK sub-technique under Obtain Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK technique profile · IntermediateGenerate Content (T1683)
Generate Content (T1683) is an Enterprise ATT&CK technique associated with Resource Development. This Bare Metal Cyber profile explains the behavior in plain language and focuses on evidence, detection, defensive design, response, and safe learning.
ATT&CK sub-technique profile · AdvancedInstall Digital Certificate (T1608.003)
Install Digital Certificate (T1608.003) is an Enterprise ATT&CK sub-technique under Stage Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedLink Target (T1608.005)
Link Target (T1608.005) is an Enterprise ATT&CK sub-technique under Stage Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedMalvertising (T1583.008)
Malvertising (T1583.008) is an Enterprise ATT&CK sub-technique under Acquire Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedMalware (T1587.001)
Malware (T1587.001) is an Enterprise ATT&CK sub-technique under Develop Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedMalware (T1588.001)
Malware (T1588.001) is an Enterprise ATT&CK sub-technique under Obtain Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedNetwork Devices (T1584.008)
Network Devices (T1584.008) is an Enterprise ATT&CK sub-technique under Compromise Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK technique profile · IntermediateObtain Capabilities (T1588)
An operator purchases, steals, downloads, or otherwise acquires exploits, malware, credentials, information, or tools rather than developing them independently.
ATT&CK sub-technique profile · AdvancedSEO Poisoning (T1608.006)
SEO Poisoning (T1608.006) is an Enterprise ATT&CK sub-technique under Stage Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedServer (T1583.004)
Server (T1583.004) is an Enterprise ATT&CK sub-technique under Acquire Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedServer (T1584.004)
Server (T1584.004) is an Enterprise ATT&CK sub-technique under Compromise Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedServerless (T1583.007)
Serverless (T1583.007) is an Enterprise ATT&CK sub-technique under Acquire Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedServerless (T1584.007)
Serverless (T1584.007) is an Enterprise ATT&CK sub-technique under Compromise Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedSocial Media Accounts (T1585.001)
Social Media Accounts (T1585.001) is an Enterprise ATT&CK sub-technique under Establish Accounts. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedSocial Media Accounts (T1586.001)
Social Media Accounts (T1586.001) is an Enterprise ATT&CK sub-technique under Compromise Accounts. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK technique profile · IntermediateStage Capabilities (T1608)
Stage Capabilities (T1608) is an Enterprise ATT&CK technique associated with Resource Development. This Bare Metal Cyber profile explains the behavior in plain language and focuses on evidence, detection, defensive design, response, and safe learning.
ATT&CK sub-technique profile · AdvancedTool (T1588.002)
Tool (T1588.002) is an Enterprise ATT&CK sub-technique under Obtain Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedUpload Malware (T1608.001)
Upload Malware (T1608.001) is an Enterprise ATT&CK sub-technique under Stage Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedUpload Tool (T1608.002)
Upload Tool (T1608.002) is an Enterprise ATT&CK sub-technique under Stage Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedVirtual Private Server (T1583.003)
Virtual Private Server (T1583.003) is an Enterprise ATT&CK sub-technique under Acquire Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedVirtual Private Server (T1584.003)
Virtual Private Server (T1584.003) is an Enterprise ATT&CK sub-technique under Compromise Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedVulnerabilities (T1588.006)
Vulnerabilities (T1588.006) is an Enterprise ATT&CK sub-technique under Obtain Capabilities. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedWeb Services (T1583.006)
Web Services (T1583.006) is an Enterprise ATT&CK sub-technique under Acquire Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedWeb Services (T1584.006)
Web Services (T1584.006) is an Enterprise ATT&CK sub-technique under Compromise Infrastructure. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.
ATT&CK sub-technique profile · AdvancedWritten Content (T1683.001)
Written Content (T1683.001) is an Enterprise ATT&CK sub-technique under Generate Content. This Bare Metal Cyber profile explains how defenders can recognize, investigate, limit, and safely study the behavior within the Resource Development context.