{"id":2844,"date":"2023-03-08T16:30:11","date_gmt":"2023-03-08T16:30:11","guid":{"rendered":"https:\/\/hardsoftsecurity.es\/?p=2844"},"modified":"2023-09-06T14:31:03","modified_gmt":"2023-09-06T12:31:03","slug":"que-es-mitre-attak","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/","title":{"rendered":"\u00bfQu\u00e9 es Mitre ATT&#038;AK?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Bienvenidos de nuevo a un nuevo post de Hardsoft Security! Hoy os traigo una entrada algo diferente a lo normal, donde vamos a conocer ese framework\/base de conocimiento tan conocida llamada ATT&amp;AK de Mitre.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" width=\"500\" height=\"300\" data-attachment-id=\"2845\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-58\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?fit=500%2C300&amp;ssl=1\" data-orig-size=\"500,300\" data-comments-opened=\"1\" data-image-title=\"image\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?fit=500%2C300&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?resize=500%2C300&#038;ssl=1\" alt=\"Mitre ATT&amp;AK\" class=\"wp-image-2845\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?w=500&amp;ssl=1 500w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?resize=300%2C180&amp;ssl=1 300w\" sizes=\"(max-width: 500px) 100vw, 500px\" \/><\/figure>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">\u00bfQu\u00e9 es Mitre ATT&amp;AK?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Es una base de conocimiento, en la cual podemos encontrar t\u00e1cticas, t\u00e9cnicas y conocimiento com\u00fan de atacantes. Esta base de conocimiento, es globalmente accesible, donde podemos encontrar toda la informaci\u00f3n necesaria respecto a los ataques utilizados en internet. Mitre ATT&amp;AK, se ha construido en base al comportamiento real de los ciberdelincuentes en la red o en que t\u00e1cticas y t\u00e9cnicas se suelen utilizar por parte de estos grupos organizados.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Toda la informaci\u00f3n y conocimiento alojado en la base de conocimiento de esta herramienta, es utilizado para desarrollar m\u00e9todos y metodolog\u00edas para abarcar las posibles amenazas en los sectores privados, gubernamentales y desarrollar nuevos productos de seguridad. Gracias a este framework podemos conocer el comportamiento de grandes grupos de ciberdelincuentes y de esta manera poder obtener informaci\u00f3n e implementar medidas defensivas.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00bfPara qu\u00e9 se utiliza Mitre ATT&amp;AK?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Principalmente, se utiliza para desplegar, investigar y fortalecer las defensas de las infraestructuras de las compa\u00f1\u00edas. Esto se realiza gracias a una matrices desarrolladas. Mitre ATT&amp;AK, se distribuye en diferentes matrices:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>ATT&amp;AK Enterprise: La cual se compone de t\u00e9cnicas y t\u00e1cticas que se aplican a los sistemas Windows, Linux y MacOS.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"800\" height=\"489\" data-attachment-id=\"2849\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-1-3\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?fit=2644%2C1616&amp;ssl=1\" data-orig-size=\"2644,1616\" data-comments-opened=\"1\" data-image-title=\"image-1\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?fit=800%2C489&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?resize=800%2C489&#038;ssl=1\" alt=\"Mitre ATT&amp;AK\" class=\"wp-image-2849\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?w=2644&amp;ssl=1 2644w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?resize=300%2C183&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?resize=768%2C469&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?resize=1536%2C939&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?resize=2048%2C1252&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-1.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>ATT&amp;AK Mobile: El cual se compone de t\u00e9cnicas y t\u00e1cticas que afectan a dispositivos m\u00f3viles.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"800\" height=\"435\" data-attachment-id=\"2850\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-2-4\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?fit=2644%2C1438&amp;ssl=1\" data-orig-size=\"2644,1438\" data-comments-opened=\"1\" data-image-title=\"image-2\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?fit=800%2C435&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?resize=800%2C435&#038;ssl=1\" alt=\"Mitre ATT&amp;AK\" class=\"wp-image-2850\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?w=2644&amp;ssl=1 2644w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?resize=300%2C163&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?resize=768%2C418&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?resize=1536%2C835&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?resize=2048%2C1114&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-2.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>ATT&amp;AK ICS: El cual se compone de t\u00e9cnicas y t\u00e1cticas relacionadas con las acciones que realizan los atacantes al intentar realizar un ataque en controles industriales.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"436\" data-attachment-id=\"2851\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-3-3\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?fit=2614%2C1424&amp;ssl=1\" data-orig-size=\"2614,1424\" data-comments-opened=\"1\" data-image-title=\"image-3\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?fit=800%2C436&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?resize=800%2C436&#038;ssl=1\" alt=\"\" class=\"wp-image-2851\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?w=2614&amp;ssl=1 2614w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?resize=300%2C163&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?resize=768%2C418&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?resize=1536%2C837&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?resize=2048%2C1116&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-3.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Las matrices se organizan por columnas, d\u00f3nde el nombre corresponde al tipo de t\u00e1cticas y despu\u00e9s se agrupan las t\u00e9cnicas. Las t\u00e1cnicas como ya sabemos es lo que intenta realizar el atacante y las t\u00e9cnicas, ser\u00edan los m\u00e9todos utilizados. Gracias a este framework, podemos ver informaci\u00f3n detallada de las t\u00e1cticas y t\u00e9cnicas utilizadas, obteniendo informaci\u00f3n como descripci\u00f3n, ejemplos, referencias y sugerencias de mitigaci\u00f3n y detecci\u00f3n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00bfC\u00f3mo se aprovecha Mitre ATT&amp;AK?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Se puede aprovechar de diferentes maneras:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Localizar defensas.<\/li>\n\n\n\n<li>Entender las brechas de seguridad.<\/li>\n\n\n\n<li>Utilizar la informaci\u00f3n para simulaciones de ataques.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Buenas pr\u00e1cticas asociadas a utilizar Mitre ATT&amp;AK<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Principalmente, se centran en las siguientes recomendaciones:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Centrar la atenci\u00f3n en las t\u00e1cticas cuando las t\u00e9cnicas sean ambiguas.<\/li>\n\n\n\n<li>Seguir investigaciones externas en relaci\u00f3n a detecciones y mitigaciones como las de JP-CERT (Comandos Windows utilizados por atacantes).<\/li>\n\n\n\n<li>Compartir tus propias investigaciones de detecci\u00f3n y mitigaci\u00f3n de ataques.<\/li>\n\n\n\n<li>Integrar la herramienta con terceros.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Ejemplo de utilizaci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">En la siguiente imagen, vamos a ver un trazo que he seleccionado previamente como un posible ataque, este supuesto, trata de un posible ataque, que comienza con un &#8220;Spearphishing Attachment&#8221; (Initial Access), el cual tiene un &#8220;Malicious File&#8221; (Execution), seguido de un &#8220;Modify system Process&#8221; (Persistence), al cual se realiza una &#8220;Explotaci\u00f3n for Privilege Escalation&#8221; (Privilege Escalation), para ir finalizando un &#8220;OS Credential Dumping &#8211; LSASS Memory&#8221; (Credential Access) y finalizar con &#8220;Lateral Movement &#8211; Pass The Hash&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"368\" data-attachment-id=\"2852\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-4-3\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?fit=3576%2C1644&amp;ssl=1\" data-orig-size=\"3576,1644\" data-comments-opened=\"1\" data-image-title=\"image-4\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?fit=800%2C368&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?resize=800%2C368&#038;ssl=1\" alt=\"\" class=\"wp-image-2852\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?w=3576&amp;ssl=1 3576w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?resize=300%2C138&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?resize=768%2C353&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?resize=1536%2C706&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?resize=2048%2C942&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-4.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A nivel de ejemplo, vamos a seleccionar la t\u00e9cnica utilizada para &#8220;Privilege Escalation&#8221; y vamos a ver toda la informaci\u00f3n que podemos obtener, como por ejemplo la descripci\u00f3n de la t\u00e9cnica:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"373\" data-attachment-id=\"2853\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-5-2\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?fit=2626%2C1224&amp;ssl=1\" data-orig-size=\"2626,1224\" data-comments-opened=\"1\" data-image-title=\"image-5\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?fit=800%2C373&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?resize=800%2C373&#038;ssl=1\" alt=\"\" class=\"wp-image-2853\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?w=2626&amp;ssl=1 2626w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?resize=300%2C140&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?resize=768%2C358&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?resize=1536%2C716&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?resize=2048%2C955&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-5.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Por otro lado, tambi\u00e9n podemos ver ejemplos de t\u00e9cnicas utilizadas por otros grupos de atacantes, los cuales, en la descripci\u00f3n nos proporcionan las t\u00e9cnicas m\u00e1s utilizadas por esos grupos organizados:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"251\" data-attachment-id=\"2854\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-6-2\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?fit=2594%2C814&amp;ssl=1\" data-orig-size=\"2594,814\" data-comments-opened=\"1\" data-image-title=\"image-6\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?fit=800%2C251&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?resize=800%2C251&#038;ssl=1\" alt=\"\" class=\"wp-image-2854\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?w=2594&amp;ssl=1 2594w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?resize=300%2C94&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?resize=768%2C241&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?resize=1536%2C482&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?resize=2048%2C643&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-6.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">En caso de pulsar en uno de los ejemplos, espec\u00edficamente en el la columna &#8220;ID&#8221;, podemos ver la descripci\u00f3n e informaci\u00f3n de todas las t\u00e9cnicas utilizadas por ese grupo en particular:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"283\" data-attachment-id=\"2855\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-7-2\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?fit=2582%2C914&amp;ssl=1\" data-orig-size=\"2582,914\" data-comments-opened=\"1\" data-image-title=\"image-7\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?fit=800%2C283&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?resize=800%2C283&#038;ssl=1\" alt=\"Mitre ATT&amp;AK\" class=\"wp-image-2855\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?w=2582&amp;ssl=1 2582w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?resize=300%2C106&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?resize=768%2C272&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?resize=1536%2C544&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?resize=2048%2C725&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-7.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Y en caso de reconocer una de las t\u00e9cnicas, si pulsamos en ella, podemos ver que posibles recomendaciones nos propone el framework para mitigar estos ataques:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"366\" data-attachment-id=\"2856\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-8-2\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?fit=2598%2C1188&amp;ssl=1\" data-orig-size=\"2598,1188\" data-comments-opened=\"1\" data-image-title=\"image-8\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?fit=800%2C366&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?resize=800%2C366&#038;ssl=1\" alt=\"Mitre ATT&amp;AK\" class=\"wp-image-2856\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?w=2598&amp;ssl=1 2598w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?resize=300%2C137&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?resize=768%2C351&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?resize=1536%2C702&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?resize=2048%2C936&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-8.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">E incluso, podemos ver una secci\u00f3n la cual nos informa de m\u00e9todos de detecci\u00f3n de este tipo de t\u00e9cnicas, enfocado al \u00e1mbito m\u00e1s defensivo:<br><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"308\" data-attachment-id=\"2857\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/image-9-2\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?fit=2612%2C1006&amp;ssl=1\" data-orig-size=\"2612,1006\" data-comments-opened=\"1\" data-image-title=\"image-9\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?fit=800%2C308&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?resize=800%2C308&#038;ssl=1\" alt=\"\" class=\"wp-image-2857\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?w=2612&amp;ssl=1 2612w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?resize=300%2C116&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?resize=768%2C296&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?resize=1536%2C592&amp;ssl=1 1536w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?resize=2048%2C789&amp;ssl=1 2048w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?w=1600&amp;ssl=1 1600w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image-9.png?w=2400&amp;ssl=1 2400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusi\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Como conclusi\u00f3n, es altamente recomendable el uso y utilizaci\u00f3n de este tipo de frameworks a la hora de hacer m\u00e1s segura nuestra infraestructura e incluso de tomar como referencia para probar nuestras defensas o crear nuestras propias herramientas de detecci\u00f3n\/ataque.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udd12 <strong><a href=\"https:\/\/hardsoftsecurity.es\/\">Hardsoft Security<\/a><\/strong> ofrece servicios de consultor\u00eda en ciberseguridad, asegurando que tu negocio est\u00e9 siempre protegido contra las amenazas m\u00e1s recientes. Y si est\u00e1s buscando un alojamiento que ponga la seguridad primero, <a href=\"https:\/\/securehosting.es\"><strong>Secure Hosting<\/strong> <\/a>es tu soluci\u00f3n ideal. Ayudamos a mantener seguro tu sitio web con las mejores pr\u00e1cicas de ciberseguridad con nuestro asesoramiento en ciberseguridad especializado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No esperes a ser el pr\u00f3ximo objetivo. Asegura tu presencia online con las mejores soluciones y servicios del mercado. \u00a1Contacta con <a href=\"https:\/\/hardsoftsecurity.es\/index.php\/contacta-con-nosotros-2\/\"><strong>Hardsoft Security<\/strong> <\/a>y <strong><a href=\"https:\/\/securehosting.es\/1251-2\/\">Secure Hosting<\/a><\/strong> hoy mismo!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>(La ciberseguridad no es un lujo, sino una necesidad. Protege tu inversi\u00f3n y tu reputaci\u00f3n en l\u00ednea.)<\/em>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bienvenidos de nuevo a un nuevo post de Hardsoft Security! Hoy os traigo una entrada algo diferente a lo normal, donde vamos a conocer ese framework\/base de conocimiento tan conocida &#8230;<\/p>\n","protected":false},"author":1,"featured_media":2845,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"Bienvenidos de nuevo a un nuevo post de Hardsoft Security! Hoy os traigo una entrada algo diferente a lo normal, donde vamos a conocer ese framework\/base de conocimiento tan conocida llamada ATT&AK de Mitre.","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[5,7],"tags":[328,326,327],"class_list":["post-2844","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informacion","category-seguridad-informatica","tag-attak","tag-mittre","tag-mittre-attak"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u00bfQu\u00e9 es Mitre ATT&amp;AK? - Hardsoft Security<\/title>\n<meta name=\"description\" content=\"Descubre qu\u00e9 es Mitre ATT&amp;CK, el marco referencial en ciberseguridad. Aprende sobre su relevancia, estructura y c\u00f3mo potenciar tus defensas.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u00bfQu\u00e9 es Mitre ATT&amp;AK? - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Descubre qu\u00e9 es Mitre ATT&amp;CK, el marco referencial en ciberseguridad. Aprende sobre su relevancia, estructura y c\u00f3mo potenciar tus defensas.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-08T16:30:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-06T12:31:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png\" \/>\n\t<meta property=\"og:image:width\" content=\"500\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"\u00bfQu\u00e9 es Mitre ATT&#038;AK?\",\"datePublished\":\"2023-03-08T16:30:11+00:00\",\"dateModified\":\"2023-09-06T12:31:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/\"},\"wordCount\":883,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/image.png?fit=500%2C300&ssl=1\",\"keywords\":[\"ATT&amp;AK\",\"Mittre\",\"Mittre ATT&amp;AK\"],\"articleSection\":[\"Informaci\u00f3n\",\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/\",\"name\":\"\u00bfQu\u00e9 es Mitre ATT&AK? - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/image.png?fit=500%2C300&ssl=1\",\"datePublished\":\"2023-03-08T16:30:11+00:00\",\"dateModified\":\"2023-09-06T12:31:03+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"description\":\"Descubre qu\u00e9 es Mitre ATT&CK, el marco referencial en ciberseguridad. Aprende sobre su relevancia, estructura y c\u00f3mo potenciar tus defensas.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/image.png?fit=500%2C300&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/image.png?fit=500%2C300&ssl=1\",\"width\":500,\"height\":300},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2023\\\/03\\\/08\\\/que-es-mitre-attak\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u00bfQu\u00e9 es Mitre ATT&#038;AK?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u00bfQu\u00e9 es Mitre ATT&AK? - Hardsoft Security","description":"Descubre qu\u00e9 es Mitre ATT&CK, el marco referencial en ciberseguridad. Aprende sobre su relevancia, estructura y c\u00f3mo potenciar tus defensas.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/","og_locale":"es_ES","og_type":"article","og_title":"\u00bfQu\u00e9 es Mitre ATT&AK? - Hardsoft Security","og_description":"Descubre qu\u00e9 es Mitre ATT&CK, el marco referencial en ciberseguridad. Aprende sobre su relevancia, estructura y c\u00f3mo potenciar tus defensas.","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2023-03-08T16:30:11+00:00","article_modified_time":"2023-09-06T12:31:03+00:00","og_image":[{"width":500,"height":300,"url":"https:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png","type":"image\/png"}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"6 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"\u00bfQu\u00e9 es Mitre ATT&#038;AK?","datePublished":"2023-03-08T16:30:11+00:00","dateModified":"2023-09-06T12:31:03+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/"},"wordCount":883,"commentCount":0,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?fit=500%2C300&ssl=1","keywords":["ATT&amp;AK","Mittre","Mittre ATT&amp;AK"],"articleSection":["Informaci\u00f3n","Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/","name":"\u00bfQu\u00e9 es Mitre ATT&AK? - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?fit=500%2C300&ssl=1","datePublished":"2023-03-08T16:30:11+00:00","dateModified":"2023-09-06T12:31:03+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"description":"Descubre qu\u00e9 es Mitre ATT&CK, el marco referencial en ciberseguridad. Aprende sobre su relevancia, estructura y c\u00f3mo potenciar tus defensas.","breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/#primaryimage","url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?fit=500%2C300&ssl=1","contentUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?fit=500%2C300&ssl=1","width":500,"height":300},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/03\/08\/que-es-mitre-attak\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"\u00bfQu\u00e9 es Mitre ATT&#038;AK?"}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-JS","jetpack-related-posts":[{"id":2949,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/04\/27\/que-es-caldera-atacando-y-defendiendo\/","url_meta":{"origin":2844,"position":0},"title":"\u00bfQu\u00e9 es Caldera? Atacando y defendiendo.","author":"david","date":"abril 27, 2023","format":false,"excerpt":"\u00a1Hola a todos! hoy vamos a ver Caldera, una herramienta que permite crear escenarios de ataques simulados y evaluar la efectividad de las defensas de una organizaci\u00f3n. En este post, nos enfocaremos en c\u00f3mo Caldera se puede utilizar en conjunto con la matriz MITRE ATT&CK para crear escenarios de ataques\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/04\/image.png?fit=1200%2C706&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3800,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2025\/06\/26\/new-cve-threats-platform\/","url_meta":{"origin":2844,"position":1},"title":"\ud83d\udd10 New CVE &amp; Threats Platform \ud83c\udf10","author":"david","date":"junio 26, 2025","format":false,"excerpt":"Hello everyone! It been a while since the last time I wrote something here. This time I am writing you and trying to provide something else with value. The latest posts here I was trying to inform you about threats and new critical CVEs. This time I want to present\u2026","rel":"","context":"En \u00abInformaci\u00f3n\u00bb","block_context":{"text":"Informaci\u00f3n","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/informacion\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2025\/06\/a08625e0-484f-46b3-b5fe-97ed856c69cf_3564x1978-scaled.jpg?fit=1200%2C666&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2025\/06\/a08625e0-484f-46b3-b5fe-97ed856c69cf_3564x1978-scaled.jpg?fit=1200%2C666&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2025\/06\/a08625e0-484f-46b3-b5fe-97ed856c69cf_3564x1978-scaled.jpg?fit=1200%2C666&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2025\/06\/a08625e0-484f-46b3-b5fe-97ed856c69cf_3564x1978-scaled.jpg?fit=1200%2C666&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2025\/06\/a08625e0-484f-46b3-b5fe-97ed856c69cf_3564x1978-scaled.jpg?fit=1200%2C666&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3654,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/","url_meta":{"origin":2844,"position":2},"title":"Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica","author":"david","date":"abril 2, 2024","format":false,"excerpt":"\u00a1Hola a todos! Hoy vamos a meternos en el mundo de WordPress con este nuevo post \"Hacking WordPress - Gu\u00eda de explotaci\u00f3n b\u00e1sica\", pero desde una perspectiva un poco diferente. No, no vamos a hablar sobre c\u00f3mo crear el blog de tus sue\u00f1os o la p\u00e1gina de tu negocio online.\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3293,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/09\/07\/empezar-en-ciberseguridad\/","url_meta":{"origin":2844,"position":3},"title":"Empezar en Ciberseguridad: Gu\u00eda para Novatos","author":"david","date":"septiembre 7, 2023","format":false,"excerpt":"La ciberseguridad es un campo en constante evoluci\u00f3n y con una demanda creciente. Si acabas de terminar tus estudios universitarios\/educaci\u00f3n y te preguntas c\u00f3mo comenzar en ciberseguridad, este post (y v\u00eddeo) es para ti. \u00bfQu\u00e9 habilidades t\u00e9cnicas necesito para comenzar en ciberseguridad? M\u00e1s all\u00e1 de lo que hayas aprendido en\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/09\/shutterstock_505066678-scaled-scaled-1.jpg?fit=1200%2C675&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":2696,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/03\/18\/exploiting-buffer-overflow\/","url_meta":{"origin":2844,"position":4},"title":"Exploiting Buffer Overflow Windows","author":"david","date":"marzo 18, 2022","format":false,"excerpt":"Bienvenid@s a tod@s, hoy os traigo un nuevo post al blog. Hoy tratamos un caso pr\u00e1ctico de c\u00f3mo explotar una vulnerabilidad de desbordamiento de b\u00fafer de una aplicaci\u00f3n, en este caso instalada en un Windows 7 de 32 Bits. Software necesario. PCMan FTP Server 2.0.7. Conseguir aqu\u00ed\u00a0exploit-db Immunity Debugger\u00a0aqu\u00ed. mona.py\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2022\/03\/Imagen-1-1.png?fit=802%2C429&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":2779,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2022\/10\/12\/nmap-caso-practico\/","url_meta":{"origin":2844,"position":5},"title":"NMAP &#8211; Caso pr\u00e1ctico","author":"david","date":"octubre 12, 2022","format":false,"excerpt":"Buenas a tod@s, despu\u00e9s de un tiempo sin escribir nada en el blog, hoy os traigo un peque\u00f1o ejemplo pr\u00e1ctico junto a los an\u00e1lisis de dos tipos de escaneo utilizando NMAP. Este ejemplo es muy sencillo, la finalidad de este post, es analizar realmente como est\u00e1 funcionando NMAP a nivel\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2014\/12\/nmap-project-logo.png?fit=1200%2C640&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/03\/image.png?fit=500%2C300&ssl=1","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/2844","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=2844"}],"version-history":[{"count":4,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/2844\/revisions"}],"predecessor-version":[{"id":3322,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/2844\/revisions\/3322"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media\/2845"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=2844"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=2844"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=2844"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}