Business Relationships

ATT&CK T1591.002

Adversaries may gather information about the victim's business relationships that can be used during targeting. Information about an organization’s business relationships may include a variety of details, including second or third-party organizations/domains (ex: managed service providers, contractors, etc.) that have connected (and potentially elevated) network access. This information may also reveal supply chains and shipment paths for the victim’s hardware and software resources. Adversaries may gather this information in various ways, such as direct elicitation via [Phishing for Informati

Category: Technique, reconnaissance

MITRE ATT&CK: T1591.002

Reference: MITRE ATT&CK T1591.002