Home/ MITRE Matrix/ Reconnaissance/ T1595.002

T1595.002Vulnerability Scanning

T1595.002 — Vulnerability Scanning is a MITRE ATT&CK technique in the Reconnaissance tactic. Clankerusecase tracks 7 detection use cases covering it and 3 threat-intel articles citing it.

Reconnaissance

View on the matrix → Filter Detection Library MITRE official spec ↗

7Use cases

3Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1595 · Active Scanning

Use cases covering this technique (7)

Windows Detect Network Scanner Behavior ESCU actions · hunting P Cisco Secure Firewall - Blocked Connection ESCU actions · hunting P Cisco Secure Firewall - High Volume of Intrusion Events Per Host ESCU actions · hunting P Cisco Secure Firewall - Repeated Blocked Connections ESCU actions · hunting P Internal Vulnerability Scan ESCU actions · alerting P [LLM] Autonomous mass-scan burst: langflow_poc.py multi-threaded FOFA target sweep Bespoke recon · alerting DSΣPDDCS [LLM] Unauthenticated access to MantisBT admin/install.php on a production host (CVE-2026-52847) Bespoke recon · hunting SΣP

Articles citing this technique (3)

crit Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks art-170

crit [GHSA / CRITICAL] CVE-2026-52881: MantisBT: Reflected XSS in admin/install.php via unescaped printf art-265

crit Webworm: New burrowing techniques art-459