Description

Discovery is a key stage in the adversary lifecycle and refers to the process of gathering information about the target environment. In a cyber security context, the goal of Discovery is to gain an understanding of the target system and network, including the available resources, configuration, and potential vulnerabilities. Adversaries may use a variety of techniques, including both active and passive methods, to gain knowledge about the target environment. These techniques may include port scanning, network mapping, system fingerprinting, and researching publicly available information about the target. The success of Discovery allows the adversary to better orient themselves within the environment, make informed decisions about their next steps, and increase their chances of achieving their objectives.