Skip to content

C0032

Campaign · ATTACK:enterprise:C0032

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:C0032",
  "title": "C0032",
  "type": "Campaign",
  "source_url": "https://attack.mitre.org/campaigns/C0032",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "campaign--7ec2826c-0bf0-4b47-acae-fd683431a4ca",
  "external_id": "C0032",
  "domain": "enterprise",
  "created": "2024-03-28T15:22:19.075Z",
  "modified": "2026-07-31T18:47:25.472Z",
  "version": "1.0",
  "aliases": [
    "C0032"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "FireEye TRITON 2019",
      "url": "https://www.fireeye.com/blog/threat-research/2019/04/triton-actor-ttp-profile-custom-attack-tools-detections.html"
    }
  ]
}

Explicit source assertions (19)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1588.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0dbf8a74-0b7d-4bb3-b20d-ab31a40d9163

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1572

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--16ee3365-01c3-4ae3-a96c-dd1c5f05a93c

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1078

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1e8644b0-9e72-47a9-bcd5-4e6c1938118a

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1074.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2545e3a8-751e-443b-ad4e-da1843014f6b

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1583.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--27238f34-4478-4141-8f51-0ddb08ba134f

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1021.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--37de6975-01c6-497f-bf45-902c302fae66

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4e18fbf9-4e26-4425-bb09-f18406284368

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1505.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--55c21d63-7c56-4025-97dc-bb1bced3aa58

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1021.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5b2fb4ff-3b19-40a1-bd49-bd5b7d0dc034

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1571

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7098d4d8-3fac-406e-84e1-508771c89802

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:S0002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--70b67b3f-7706-41aa-8330-58323a8553fc

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a66b1fae-e3cb-4165-92e0-33ade119e66f

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b8f4abe0-5d13-426e-b8c8-c709c93c91ae

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1133

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c5a19163-a5b3-4b14-bf9d-d23d95d218d4

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c8aab802-70d9-4f95-b024-4310149518dc

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1070.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cbcb2ce0-29b6-47ba-9dc0-2154a31ca3a1

FireEye TRITON 2019

ATTACK:enterprise:C0032 → attributed-to → ATTACK:enterprise:G0088

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dd10cc43-3f46-42f4-9230-69a0e2751ab2

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1546.012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--df4d5d3b-67b7-4af5-adb3-ee83b5f44c5b

FireEye TRITON 2019

ATTACK:enterprise:C0032 → uses → ATTACK:enterprise:T1003.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fa8c17ed-0cf5-4661-9436-e4ada316dbb8

FireEye TRITON 2019

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.