Enterprise Resource Discovery

Adversaries may discover resources available within an enterprise environment and information needed to identify or access them. Resources may include accounts, groups, systems, devices, virtual machines, files, directories, storage volumes, cloud objects, containers, applications, software, processes, services, network shares, repositories, policies, logs, and other local, remote, or cloud-hosted assets.

Adversaries may enumerate, query, scan, or browse resources to determine what exists, where it is located, how it is related to other resources, and whether it is accessible or useful for subsequent actions.

See the ATT&CK Discovery tactic for techniques describing specific resources, environmental characteristics, and discovery mechanisms.