What MITRE ATT&CK T1561.002: Disk Structure Wipe (Enterprise Tactic TA0040 - Impact) requires
MITRE ATT&CK T1561.002 (Disk Structure Wipe) is an Enterprise Impact sub-technique of T1561 (Disk Wipe). Adversaries may corrupt or wipe the disk data structures on a hard drive necessary to boot a system; targeting specific critical systems or in large numbers in a network to interrupt availability to system and network resources. Adversaries may attempt to render the system unable to boot by overwriting critical data located in structures such as the master boot record (MBR) or partition table. Affected platforms: Linux, macOS, Windows, Network. MITRE-documented mitigations include M1053 Data Backup. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-03, AC-06, CM-02, CP-02, CP-07, CP-09, CP-10, SI-03.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1561/002/
SHA-256 integrity: a200afeffebb00f48f99847dd5b226aea433e8b9bc5647896eac35f84b62b68c
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1561.002: Disk Structure Wipe (https://attack.mitre.org/techniques/T1561/002/)
- MITRE ATT&CK Tactic TA0040: Impact (https://attack.mitre.org/tactics/TA0040/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access