MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Reconnaissance/ T1590.005

T1590.005IP Addresses

T1590.005 — IP Addresses is a MITRE ATT&CK technique in the Reconnaissance tactic. Clankerusecase tracks 4 detection use cases covering it.

Reconnaissance

View on the matrix → Filter Detection Library MITRE official spec ↗

4Use cases

0Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1590 · Gather Victim Network Information

Use cases covering this technique (4)

Cisco ASA - Reconnaissance Command Activity ESCU actions · hunting P Cisco NVM - Suspicious Network Connection to IP Lookup Service API ESCU actions · hunting P Wermgr Process Connecting To IP Check Web Services ESCU actions · alerting P Windows Gather Victim Network Info Through Ip Check Web Services ESCU actions · hunting P