Lateral Movement

From ema
Jump to navigation Jump to search
EMA ID: ema-1009
Description: Indicates that the malware instance is able to propagate through the infection of a machine or is able to infect a file after executing on a system. The malware instance may infect actively (e.g., gain access to a machine directly) or passively (e.g., send malicious email). This Capability does not encompass any aspects of the initial infection that is done independently of the malware instance itself.
Associated Attributes: Infection Propagation: autonomy, Infection Propagation: file infection type, Infection Propagation: file modification type, Infection Propagation: infection targeting, Infection Propagation: scope, Infection Propagation: targeted file architecture type, Infection Propagation: targeted file type

Associated With Lateral Movement
No results        


,
,
,
,
,
,