[Feature Request] Add Python module for detecting T1087.003

Open
#13 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
35/100
Issue type
Feature
Clarity
Needs clarification
Activity status
Stale
Tech stack
python
Domain
security

Research direction

No file, test, or entry point is named. Start by locating existing Python modules for MITRE ATT&CK detections and the project's tests, then compare their structure with T1087.003, Account Discovery: Email Account. Done means the repository contains a detection module for T1087.003 with corresponding verification.

Written by the indexing model from the issue text.

Description

API: Admin API: Gmail enhancement Subtechnique: 003 Tactic: Discovery Technique: T1087

🐍 Python Module for MITRE ATT&CK Technique Detection

Technique Name: Account Discovery: Email Account

Technique ID: T1087.003

Technique Description: Adversaries may attempt to get a listing of email addresses and accounts. This internal identity enumeration can then be used to target further post-exploitation collection against accounts with placement and access to desired information.

Please ensure the following tasks are completed before submitting your feature request:

  • This issue is for a specific MITRE ATT&CK technique detection
  • The technique name and ID are clearly specified
  • The problem and desired solution are clearly described
  • Any necessary alternatives or additional context have been provided
Dominant language
Python
Stars
169
Forks
8
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from elastic/SWAT

All issues in elastic/SWAT

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.