MITRE Shield will be retired on October 18th in favor of MITRE Engage. To learn more, click here.

Hardware Manipulation

Alter the hardware configuration of a system to limit what an adversary can do with the device.

Hardware Manipulation can be making physical or configuration changes, including physically removing a system's microphone, camera, on-board Wi-Fi adapter, etc. or using other controls to disable those devices.

Details
ID: DTE0020
Tactics:  Contain Disrupt

Opportunities

IDDescription
DOS0106 There is an opportunity to alter the system to prevent an adversary from capturing audio content.
DOS0115 There is an opportunity to alter the system to prevent an adversary from capturing video content.

Use Cases

IDDescription
DUC0106 A defender can physically remove or disable a system's microphone and web camera so that audio capture is not possible.
DUC0115 A defender can physically remove or disable a system's web camera and remove any video capture applications so that video capture is not possible.

Procedures

IDDescription
DPR0037 Remove the microphone from a laptop to prevent an adversary from capturing audio from the device.
DPR0038 Remove the Wi-Fi hardware from a device to prevent an adversary from enabling and using a Wi-Fi connection.

ATT&CK® Techniques

IDNameATT&CK Tactics
T1123 Audio Capture Collection
T1125 Video Capture Collection