TFTP Boot
Subtechnique · ATTACK:enterprise:T1542.005
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:T1542.005",
"title": "TFTP Boot",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1542/005",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4",
"external_id": "T1542.005",
"domain": "enterprise",
"created": "2020-10-20T00:06:56.180Z",
"modified": "2026-05-12T15:12:00.623Z",
"version": "2.0",
"aliases": [
],
"tactics": [
"stealth",
"persistence"
],
"source_references": [
{
"source_name": "Cisco Blog Legacy Device Attacks",
"url": "https://community.cisco.com/t5/security-blogs/attackers-continue-to-target-legacy-devices/ba-p/4169954"
}
]
}Explicit source assertions (7)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1542.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--123c8150-c814-4bf2-b06f-e005cb257e17
ATTACK:enterprise:M1028 → mitigates → ATTACK:enterprise:T1542.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--46ace311-9be9-4d4a-8ef0-fc2c0659fba9
ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1542.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6223d178-5cf3-4c84-84f1-583895468915
Cisco IOS Software Integrity Assurance - AAA · Cisco IOS Software Integrity Assurance - TACACSATTACK:enterprise:M1035 → mitigates → ATTACK:enterprise:T1542.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8dec7181-81a7-4f77-8b83-81e93cf09f10
ATTACK:enterprise:T1542.005 → subtechnique-of → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a468fd3d-b1a8-4d1f-b19b-8073a80a0041
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1542.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f0488c32-f937-4eb9-8068-092795872582
Cisco IOS Software Integrity Assurance - Image File Verification · Cisco IOS Software Integrity Assurance - Image File Integrity · Cisco IOS Software Integrity Assurance - Change ControlATTACK:enterprise:M1046 → mitigates → ATTACK:enterprise:T1542.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f8aff281-c6e4-47fd-8111-d1720126b49b
Cisco IOS Software Integrity Assurance - Secure Boot