What MITRE ATT&CK T1588.004: Digital Certificates (Enterprise Tactic TA0042 - Resource Development) requires
MITRE ATT&CK T1588.004 (Digital Certificates) is an Enterprise Resource Development sub-technique of T1588 (Obtain Capabilities). Adversaries may buy and/or steal SSL/TLS certificates that can be used during targeting. SSL/TLS certificates are designed to instill trust. They include information about the key, information about its owner's identity, and the digital signature of an entity that has verified the certificate's contents are correct. If the signature is valid, and the person examining the certificate trusts the signer, then they know they can use that key to communicate with its owner. Affected platforms: PRE. MITRE-documented mitigations include M1056 Pre-compromise.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1588/004/
SHA-256 integrity: 1bc785411df20053cdd36b4842c4863947ae23f34b3bc6997c6ac8b20d3e239c
Primary Citations — 6 traced to source
- MITRE ATT&CK Technique T1588.004: Digital Certificates (https://attack.mitre.org/techniques/T1588/004/)
- MITRE ATT&CK Tactic TA0042: Resource Development (https://attack.mitre.org/tactics/TA0042/)
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-attack-t1588-004-digital-certificates.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-attack-t1588-004-digital-certificates.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-attack-t1588-004-digital-certificates
- Back to registry: Browse all 10,085 compliance nodes