Carl USES MAC address spoofing
Carl changed the rogue device's MAC address to resemble observed workstations.
Explicit Confidence 99% · Carl EP 41 Details
“then change the MAC address to make myself look like the workstations I’ve been observing”
Technique
technique:mac_address_spoofing
Also: changing the MAC address, changing your MAC, network access bypass
Changing the rogue device’s MAC address to resemble observed workstations on the network.
Changing the rogue device’s MAC address to resemble observed workstations on the network.
“Then I’ll also change the MAC address to make myself look like the workstations I’ve been observing.”
Changing a computer’s MAC address to resemble an allowed device and obtain broader network access.
“we changed the MAC address on his computer”
“network access bypass with something so simple as changing your MAC”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Carl | Explicit | 41 |
| incoming | USES | Jeremiah Roe | Explicit | 125 |
Carl USES MAC address spoofing
Carl changed the rogue device's MAC address to resemble observed workstations.
Explicit Confidence 99% · Carl EP 41 Details
“then change the MAC address to make myself look like the workstations I’ve been observing”
Jeremiah Roe USES MAC address spoofing
Jeremiah changed his computer's MAC address to resemble an allowed printer address in order to bypass network access restrictions.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“Being able to conduct network access bypass with something so simple as changing your MAC”