What MITRE ATT&CK T1072: Software Deployment Tools (Enterprise Tactic TA0002 - Execution / TA0008 - Lateral Movement) requires
MITRE ATT&CK T1072 (Software Deployment Tools) is an Enterprise Execution and Lateral Movement technique. Adversaries may gain access to and use centralized software suites installed within an enterprise to execute commands and move laterally through the network. Configuration management and software deployment applications may be used in an enterprise network or cloud environment for routine administration purposes. These systems may also be integrated into CI/CD pipelines. Examples of such solutions include: SCCM, HBSS, Altiris, AWS Systems Manager, Microsoft Intune, Azure Arc, and GCP Deployment Manager. Affected platforms: Linux, macOS, Windows, Network, SaaS. MITRE-documented mitigations include M1018 User Account Management, M1015 Active Directory Configuration, M1051 Update Software, M1026 Privileged Account Management, M1027 Password Policies, M1033 Limit Software Installation. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-04, AC-05, AC-06, AC-12, AC-20, CA-07.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1072/
SHA-256 integrity: c2d9a9c2988294ed9e9b519b66ccf2b2688db14e25f76c1fba63837ec250d911
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1072: Software Deployment Tools (https://attack.mitre.org/techniques/T1072/)
- MITRE ATT&CK Tactic TA0002: Execution (https://attack.mitre.org/tactics/TA0002/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-attack-t1072-software-deployment-tools.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-attack-t1072-software-deployment-tools.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-attack-t1072-software-deployment-tools
- Back to registry: Browse all 10,085 compliance nodes