{
  "technique_id": "T1040",
  "name": "Network Sniffing",
  "tactics": [
    "Credential Access",
    "Discovery"
  ],
  "platforms": [
    "IaaS",
    "Linux",
    "macOS",
    "Network Devices",
    "Windows"
  ],
  "summary": "Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network. Network sniffing refers to using the network interface on a system to monitor or capture information sent over a wired or wireless connection. An adversary may place a network interface into promiscuous mode to passively access data in transit over the network, or use span ports to capture a larger amount of data...",
  "generated_by": "SOC Response Atlas by Basyrix"
}