T1213.001 Confluence — apt.directory

Confluence

Adversaries may leverage Confluence repositories to mine valuable information. Often found in development environments alongside Atlassian JIRA, Confluence is generally used to store development-related documentation; however, it may contain more diverse categories of useful information, such as: * Policies, procedures, and standards * Physical / logical network diagrams * System architecture diagrams * Technical system documentation * Testing / development credentials (i.e., Unsecured Credentials) * Work / project schedules * Source code snippets * Links to network shares and other internal resources

ATT&CK T1213.001 platforms — Status Active Version 20.1

Adversaries may leverage Confluence repositories to mine valuable information.¹ Often found in development environments alongside Atlassian JIRA, Confluence is generally used to store development-related documentation; however, it may contain more diverse categories of useful information, such as: * Policies, procedures, and standards * Physical / logical network diagrams * System architecture diagrams * Technical system documentation * Testing / development credentials (i.e., Unsecured Credentials) * Work / project schedules * Source code snippets * Links to network shares and other internal resources

Confluence Standards in Data Engineering

Groups using this technique

Group	Name	Country
grp_g1004	LAPSUS$	—

Claims

No public claim points at this technique yet.

Auto-ingested and not human-reviewed; confidence and validity read by citation.