Técnica MITRE ATT&CK · Acceso a credenciales, Recopilación

`T1557.002` ARP Cache Poisoning

Subtécnica de T1557 Adversary-in-the-Middle

Adversaries may poison Address Resolution Protocol (ARP) caches to position themselves between the communication of two or more networked devices. This activity may be used to enable follow-on behaviors such as [Network Sniffing](https://attack.mitre.org/techniques/T1040) or [Transmitted Data Manipulation](https://attack.mitre.org/techniques/T1565/002). The ARP protocol is used to resolve IPv4…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

Cleaver

Reglas Sigma para cazarla

SigmaHQ no tiene reglas para esta técnica.

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.