2022-01-29 11:34:46 -05:00
|
|
|
# Counter C00131: Seize and analyse botnet servers
|
|
|
|
|
|
2023-08-10 14:51:53 -04:00
|
|
|
* **Summary**: Take botnet servers offline by seizing them.
|
2022-01-29 11:34:46 -05:00
|
|
|
|
|
|
|
|
* **Playbooks**:
|
|
|
|
|
|
2023-08-10 14:51:53 -04:00
|
|
|
* **Metatechnique**: M005 - Removal
|
2022-01-29 11:34:46 -05:00
|
|
|
|
|
|
|
|
* **Resources needed:**
|
|
|
|
|
|
|
|
|
|
* **Belongs to tactic stage**: TA11
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Actor types | Sectors |
|
|
|
|
|
| ----------- | ------- |
|
2023-08-10 14:51:53 -04:00
|
|
|
| [A029 server admininistrator](../../generated_pages/actortypes/A029.md) | S008 |
|
2022-01-29 11:34:46 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Counters these Tactics |
|
|
|
|
|
| ---------------------- |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Counters these Techniques |
|
|
|
|
|
| ------------------------- |
|
2022-07-01 12:24:47 -04:00
|
|
|
| [T0049 Flooding the Information Space](../../generated_pages/techniques/T0049.md) |
|
2022-01-29 11:34:46 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Seen in incidents |
|
|
|
|
|
| ----------------- |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW
|
