From 3d60bf1109a08dcd277feb49a46d82447c37928d Mon Sep 17 00:00:00 2001 From: Desiree Beck Date: Wed, 28 Aug 2019 18:09:05 -0400 Subject: [PATCH] add beh --- discovery/README.md | 1 + discovery/network-share-discover.md | 12 ++++++++++++ 2 files changed, 13 insertions(+) create mode 100644 discovery/network-share-discover.md diff --git a/discovery/README.md b/discovery/README.md index c645d37..d83f067 100644 --- a/discovery/README.md +++ b/discovery/README.md @@ -14,6 +14,7 @@ Behaviors that aim to gain knowledge about the system and internal network. * **Local Network Configuration Discovery** [T1422](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/local-network-configuration-discover.md) * **Network Sniffing** [T1040](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/network-sniff.md) * **Network Service Scanning** [T1046](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/network-service-scan.md) +* **Network Share Discovery** [T1135](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/network-share-discover.md) * **Peripheral Device Discovery** [T1120](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/peripheral-device-discover.md) * **Process Discovery** [T1057](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/process-discover.md) * **Query Registry** [T1012](https://github.com/MBCProject/mbc-markdown/blob/master/discovery/query-registry.md) diff --git a/discovery/network-share-discover.md b/discovery/network-share-discover.md new file mode 100644 index 0000000..62e28ae --- /dev/null +++ b/discovery/network-share-discover.md @@ -0,0 +1,12 @@ +||| +|---------|------------------------| +|**ID**|**T1135**| +|**Objective(s)**|[Discovery](https://github.com/MBCProject/mbc-markdown/tree/master/discovery)| +|**Related ATT&CK Technique(s)**|[Network Share Discovery](https://attack.mitre.org/techniques/T1135)| + + +Network Share Discovery +======================= +Malware may discover and/or scan shared network drives. + +See ATT&CK: [**Network Share Discovery**](https://attack.mitre.org/techniques/T1135). \ No newline at end of file