ATT&CK · T1213.001 · sub-technique
Confluence
Tactics: collection
About
Adversaries may leverage Confluence repositories to mine valuable information. Often found in development environments alongside Atlassian JIRA, Confluence is generally used to store development-related documentation, however, in general may contain more diverse categories of useful information, such as: * Policies, procedures, and standards * Physical / logical network diagrams * System architecture diagrams * Technical system documentation * Testing / development credentials (i.e., Unsecured Credentials) * Work / project schedules * Source code snippets * Links to network shares and other internal resources
Used by actors
1 known groups
Software
1 malware/tools implement this
Corpus indicators tagged with this technique
0 indicators in the corpus carry T1213.001.
No corpus indicators are tagged with this technique yet.