Esc

Disk Content Wipe - T1561.001

(ATT&CK® Technique)

Definition

Adversaries may erase the contents of storage devices on specific systems or in large numbers in a network to interrupt availability to system and network resources.

D3FEND Inferred Relationships

Browse the D3FEND knowledge graph by clicking on the nodes below.

        graph LR;

     T1561001["Disk Content Wipe"] --> |may-modify| Partition["Partition"]; class T1561001 OffensiveTechniqueNode;
        class Partition ArtifactNode; click Partition href "/dao/artifact/d3f:Partition";
        click T1561001 href "/offensive-technique/attack/T1561.001/"; click Partition href "/dao/artifact/d3f:Partition"; T1561001["Disk Content Wipe"] --> |may-modify| PartitionTable["Partition Table"]; class T1561001 OffensiveTechniqueNode;
        class PartitionTable ArtifactNode; click PartitionTable href "/dao/artifact/d3f:PartitionTable";
        click T1561001 href "/offensive-technique/attack/T1561.001/"; click PartitionTable href "/dao/artifact/d3f:PartitionTable"; T1561001["Disk Content Wipe"] --> |may-modify| Volume["Volume"]; class T1561001 OffensiveTechniqueNode;
        class Volume ArtifactNode; click Volume href "/dao/artifact/d3f:Volume";
        click T1561001 href "/offensive-technique/attack/T1561.001/"; click Volume href "/dao/artifact/d3f:Volume"; T1561001["Disk Content Wipe"] --> |modifies| BlockDevice["Block Device"]; class T1561001 OffensiveTechniqueNode;
        class BlockDevice ArtifactNode; click BlockDevice href "/dao/artifact/d3f:BlockDevice";
        click T1561001 href "/offensive-technique/attack/T1561.001/"; click BlockDevice href "/dao/artifact/d3f:BlockDevice"; T1561001["Disk Content Wipe"] --> |may-modify| BootSector["Boot Sector"]; class T1561001 OffensiveTechniqueNode;
        class BootSector ArtifactNode; click BootSector href "/dao/artifact/d3f:BootSector";
        click T1561001 href "/offensive-technique/attack/T1561.001/"; click BootSector href "/dao/artifact/d3f:BootSector";                                                                 DiskPartitioning["Disk Partitioning"] -->
          | creates | PartitionTable["Partition Table"];

          DiskPartitioning["Disk Partitioning"] -.->
            | may-evict | T1561001["Disk Content Wipe"] ;
          class DiskPartitioning DefensiveTechniqueNode;
          class PartitionTable ArtifactNode;
          click DiskPartitioning href "/technique/d3f:DiskPartitioning";

json