Engage Goals: EGO0001 Expose, EGO0003 Elicit
Engage Approach: EAP0001 Collect, EAP0002 Detect
Engage Actions: EAC0015 Information Manipulation, EAC0016 Network Manipulation
Name of Element: Mirrored Network Topology
Description of Element:
This element involves creating a fake network segment that mirrors the organization’s real network topology but contains deceptive systems or services.
Technical Context:
Placement: Within the organization’s internal network, alongside other critical servers.
This element can be used to identify attackers attempting to map the organization’s network or to redirect attackers to a controlled environment.
Other:
Att&ck/Engage Mapping: T1046 Network Service Scanning / E1505 Decoy Network
This element requires careful planning and execution to ensure that it does not interfere with the normal operation of the network.