Initial Access, Tactic TA0001 - Enterprise | MITRE ATT&CK®

Initial Access consists of techniques that use various entry vectors to gain their initial foothold within a network. Techniques used to gain a foothold include targeted spearphishing and exploiting weaknesses on public-facing web servers. Footholds gained through initial access may allow for continued access, like valid accounts and use of external remote services, or may be limited-use due to changing passwords.

Initial Access, Tactic TA0001 - Enterprise | MITRE ATT&CK® ATT&CKcon 7.0 is coming October 27-28, 2026. Learn more about ATT&CKcon 7.0 . Home Tactics Enterprise Initial Access Initial Access The adversary is trying to get into your network. Initial Access consists of techniques that use various entry vectors to gain their initial foothold within a network. Techniques used to gain a foothold include targeted spearphishing and exploiting weaknesses on public-facing web servers. Footholds gained through initial access may allow for continued access, like valid accounts and use of external rem

related reading

• Persistence, Tactic TA0003 - Enterprise | MITRE ATT&CK®attack.mitre.org
• Valid Accounts, Technique T1078 - Enterprise | MITRE ATT&CK®attack.mitre.org
• Trusted Relationship, Technique T1199 - Enterprise | MITRE ATT&CK®attack.mitre.org
• External Remote Services, Technique T1133 - Enterprise | MITRE ATT&CK®attack.mitre.org
• Account Manipulation, Technique T1098 - Enterprise | MITRE ATT&CK®attack.mitre.org
• Responding to Adversary in the Middle attacksinvictus-ir.com
• Remote Services, Technique T1021 - Enterprise | MITRE ATT&CK®attack.mitre.org
• Email Compromise To Mass Phishing Campaigndarktrace.com
• What Is Cyber Threat Hunting? Complete Guide | Exabeamexabeam.com
• Cloud Email Security - Block Malicious Email Attacks | Abnormal AIabnormal.ai
• PerfectData Software Abuse and Account Takeover Risksdarktrace.com
• Capture the flag (cybersecurity) - Wikipediaen.wikipedia.org