What MITRE ATT&CK T1559.002: Dynamic Data Exchange (Enterprise Tactic TA0002 - Execution) requires
MITRE ATT&CK T1559.002 (Dynamic Data Exchange) is an Enterprise Execution sub-technique of T1559 (Inter-Process Communication). Adversaries may use Windows Dynamic Data Exchange (DDE) to execute arbitrary commands. DDE is a client-server protocol for one-time and/or continuous inter-process communication (IPC) between applications. Once a link is established, applications can autonomously exchange transactions consisting of strings, warm data links (notifications when a data item changes), hot data links (duplications of changes to a data item), and requests for command execution. Affected platforms: Windows. MITRE-documented mitigations include M1040 Behavior Prevention on Endpoint, M1048 Application Isolation and Sandboxing, M1054 Software Configuration, M1042 Disable or Remove Feature or Program. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-04, AC-05, AC-06, CM-02, CM-05, CM-06.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1559/002/
SHA-256 integrity: ff28d25486f5ffd762f58f8194e3ea0e1aeae73bb1cce546357840bf7a04678e
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1559.002: Dynamic Data Exchange (https://attack.mitre.org/techniques/T1559/002/)
- MITRE ATT&CK Tactic TA0002: Execution (https://attack.mitre.org/tactics/TA0002/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-attack-t1559-002-dynamic-data-exchange.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-attack-t1559-002-dynamic-data-exchange.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-attack-t1559-002-dynamic-data-exchange
- Back to registry: Browse all 10,085 compliance nodes