Compliance Node Overview
MITRE ATT&CK T1213.005 (Messaging Applications) is an Enterprise Collection sub-technique of T1213 (Data from Information Repositories). Adversaries may leverage chat and messaging applications, such as Microsoft Teams, Google Chat, and Slack, to mine valuable information. The following is a brief list of example information that may hold potential value to an adversary and may also be found on messaging applications: * Testing / development credentials (i.e., Chat Messages) * Source code snippets * Links to network shares and other internal resources * Proprietary data * Discussions about ongoing incident response efforts In addition to. Affected platforms: SaaS, Office Suite. MITRE-documented mitigations include M1017 User Training, M1047 Audit, M1060 Out-of-Band Communications Channel. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-04, AC-05, AC-06, AC-16, AC-17, AC-21.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1213/005/
SHA-256 integrity: 108bf00b0642e7bc0fdb1f83c97be3b8fd7278bc760abda7da28248c4bfef969
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1213.005: Messaging Applications (https://attack.mitre.org/techniques/T1213/005/)
- MITRE ATT&CK Tactic TA0009: Collection (https://attack.mitre.org/tactics/TA0009/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access