T1040 — Network Sniffing

MITRE ATT&CK technique observed against the OffSeq honeypot fleet

Last 30 days · #21 most-observed technique · last seen 43 minutes ago

The #21 most-observed ATT&CK technique across captured attacks.

MITRE ATT&CK technique T1040 (Network Sniffing), observed against the OffSeq honeypot fleet. OffSeq honeypots observed this technique in 748 attacks from 472 distinct source IPs over the last 30 days.

T1040 on attack.mitre.org →