Code Repositories - T1213.003

(ATT&CK® Technique)

Definition

Adversaries may leverage code repositories to collect valuable information. Code repositories are tools/services that store source code and automate software builds. They may be hosted internally or privately on third party sites such as Github, GitLab, SourceForge, and BitBucket. Users typically interact with code repositories through a web application or command-line utilities such as git.

D3FEND Inferred Relationships

Browse the D3FEND knowledge graph by clicking on the nodes below.

        graph LR;

     T1213003["Code Repositories"] --> |reads| CodeRepository["Code Repository"]; class T1213003 OffensiveTechniqueNode;
        class CodeRepository ArtifactNode; click CodeRepository href "/dao/artifact/d3f:CodeRepository";
        click T1213003 href "/offensive-technique/attack/T1213.003/"; click CodeRepository href "/dao/artifact/d3f:CodeRepository";      T1213003["Code Repositories"] --> |accesses| Resource["Resource"]; class T1213003 OffensiveTechniqueNode;
        class Resource ArtifactNode; click Resource href "/dao/artifact/d3f:Resource";
        click T1213003 href "/offensive-technique/attack/T1213.003/"; click Resource href "/dao/artifact/d3f:Resource";          RestoreDatabase["Restore Database"] -->
          | restores | CodeRepository["Code Repository"];

          RestoreDatabase["Restore Database"] -.->
            | may-restore | T1213003["Code Repositories"] ;
          class RestoreDatabase DefensiveTechniqueNode;
          class CodeRepository ArtifactNode;
          click RestoreDatabase href "/technique/d3f:RestoreDatabase";

json

Use of the MITRE D3FEND™ Knowledge Graph and website is subject to the Terms of Use. Use of the MITRE D3FEND website is subject to the MITRE D3FEND Privacy Policy. MITRE D3FEND is funded by the National Security Agency (NSA) Cybersecurity Directorate and managed by the National Security Engineering Center (NSEC) which is operated by The MITRE Corporation. MITRE D3FEND; and the MITRE D3FEND logo are trademarks of The MITRE Corporation. MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. MITRE ATT&CK content is subject to the MITRE ATT&CK terms of use. This software was produced for the U. S. Government under Basic Contract No. W56KGU-18-D-0004, and is subject to the Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation Clause 252.227-7014 (FEB 2012)
© 2025 The MITRE Corporation.
Approved for Public Release; Distribution Unlimited #20-2338 and #23-1207.

UI: 0.20.0

UNCLASSIFIED