Vulnerabilities
Subtechnique · ATTACK:enterprise:T1588.006
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:T1588.006",
"title": "Vulnerabilities",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1588/006",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--2b5aa86b-a0df-4382-848d-30abea443327",
"external_id": "T1588.006",
"domain": "enterprise",
"created": "2020-10-15T02:59:38.628Z",
"modified": "2025-10-24T17:48:34.033Z",
"version": "1.0",
"aliases": [
],
"tactics": [
"resource-development"
],
"source_references": [
{
"source_name": "National Vulnerability Database",
"url": "https://nvd.nist.gov/"
}
]
}Explicit source assertions (6)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0034 → uses → ATTACK:enterprise:T1588.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--02804eca-a840-4ffe-8abd-60705d3456e4
US District Court Indictment GRU Unit 74455 October 2020ATTACK:enterprise:M1056 → mitigates → ATTACK:enterprise:T1588.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0a328420-501e-4d8d-b2bd-9b3d4562e767
ATTACK:enterprise:T1588.006 → subtechnique-of → ATTACK:enterprise:T1588
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1b7c7b5c-22df-4713-be96-818a8916e6d1
ATTACK:enterprise:G1017 → uses → ATTACK:enterprise:T1588.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c9b4b56c-177d-446b-b34b-4e12c35304f2
CISA AA24-038A PRC Critical Infrastructure February 2024ATTACK:enterprise:C0049 → uses → ATTACK:enterprise:T1588.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e9e4e756-ab1e-4b60-9bc6-7ceb54834970
CISA Leviathan 2024ATTACK:enterprise:G1053 → uses → ATTACK:enterprise:T1588.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ec384765-a84b-40f3-abf9-5bec1f7e5f10
Microsoft Storm-501 Sabbath Ransomware Embargo September 2024