FORENSIA

ATT&CK · T1213.001 · sub-technique

Confluence

Tactics: collection

About

Adversaries may leverage Confluence repositories to mine valuable information. Often found in development environments alongside Atlassian JIRA, Confluence is generally used to store development-related documentation, however, in general may contain more diverse categories of useful information, such as: * Policies, procedures, and standards * Physical / logical network diagrams * System architecture diagrams * Technical system documentation * Testing / development credentials (i.e., Unsecured Credentials) * Work / project schedules * Source code snippets * Links to network shares and other internal resources

Used by actors

1 known groups

Software

1 malware/tools implement this

TruffleHog

Corpus indicators tagged with this technique

0 indicators in the corpus carry T1213.001.

No corpus indicators are tagged with this technique yet.