// MITRE ATT&CK

T1593.001 · Social Media

🎯 Reconnaissance PRE Sub-technique

Sub-technique of T1593 · Search Open Websites/Domains.

Adversaries may search social media for information about victims that can be used during targeting. Social media sites may contain various information about a victim organization, such as business announcements as well as information about the roles, locations, and interests of staff. Adversaries ...

How to detect & mitigate it

Detecting Social Media starts with your SIEM/EDR telemetry. Write a detection rule with the Sigma generator, analyze suspicious logs in the log analyzer, and place the technique on your coverage with the ATT&CK matrix.

Related techniques

Source: MITRE ATT&CK®. ATT&CK is a registered trademark of The MITRE Corporation. Content for educational purposes.