File and Directory Discovery T1083
Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including…
- Tactics
- Discovery
- Actors using it
- 52
- Sub-techniques
- 0
Ransomware groups reported using it
qilinakiraBrainCipherplayrhysidapayloadnightspiredragonforcesarcomaclop
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Medusa Group52 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- ChimeraChina · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- TeamTNT43 techniques
- FIN13Elephant Beetle · 42 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- ShinyHuntersUNC6240, Bling Libra · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- UNC3886China · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- Fox KittenIran · UNC757, Parisite, Pioneer Kitten · 31 techniques
- ToddyCat24 techniques
- LuminousMothChina · 24 techniques
- SidewinderIndia · T-APT-04, Rattlesnake · 23 techniques
- Winter VivernTA473, UAC-0114 · 22 techniques
- DarkhotelSouth Korea · DUBNIUM, Zigzag Hail · 22 techniques
- APT5China · Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD · 22 techniques
- Velvet Ant22 techniques
- Play22 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- Lotus BlossomDRAGONFISH, Spring Dragon, RADIUM · 17 techniques
- ConfuciusConfucius APT · 16 techniques
- LeafminerIran · Raspite · 14 techniques
- admin@338China · 12 techniques
- APT18TG-0416, Dynamite Panda, Threat Group-0416 · 11 techniques
- Dark CaracalLebanon · 11 techniques
- Aoqin DragonChina · 9 techniques
- Sowbug9 techniques
- Windigo7 techniques
- Winnti GroupChina · Blackfly · 6 techniques