Attack Preparation

The adversary acquires and sets up the tooling and accounts needed to launch the planned attack.

In the Attack Preparation stage the adversary is making preparations for the planned attack. This may include acquiring, developing, or adapting pre-existing tools, as well as the setting up and centralised control of accounts on the targeted webapp or API.