risks / Network discovery

Description

Allows an attacker to inventory network resources. May allow an attacker to focus attacks on specific network locations.

Risk: LOW

This risk may assist in additional attacks, or gain access to confidential data that do not create organizational risk on their own.

Mitigations

1. Use network filtering
2. Use network segmentation
3. Apply zero-trust networking principles

Links

1. https:/​/​attack.mitre.org/​techniques/​T1046/​

Affected Privileges

An attacker may be able to exploit this risk if they gain any of the following privileges: