Resource Development
Details
| ID | PT0002 |
| MITRE ATT&CK ID | TA0042 |
| Created | 2026-06-22 |
| Last Modified | 2026-06-22 |
| Contributors | slashsec |
| Version Permalink | Link |
Description
The adversary is trying to establish resources they can use to support physical operations.
Resource Development consists of techniques for obtaining or fabricating items used during an engagement, such as uniforms, badges, pretext materials, tools, vehicles, or copied credentials. These resources support Initial Access, Stealth, and other phases of a physical intrusion.
Techniques
| ID | Name | Description |
|---|---|---|
| P0004 | Fabricate ID | Adversaries may create or alter identification credentials to impersonate authorized personnel, contractors, or visitors at a target facility. Fabricated IDs support pretext-based access and reduce scrutiny at checkpoints. |
| P0004.001 | Fabricate Victim Company ID | Adversaries may create identification that mimics the target organization's badges, access cards, or visitor credentials. This may include copying branding, badge formats, or card technologies observed during reconnaissance. |
| P0004.002 | Fabricate Victim Vendor ID | Adversaries may create identification associated with vendors, contractors, or service providers commonly seen at the target facility. Vendor or subcontractor credentials can exploit weaker verification for third-party personnel. |
| P0005 | Develop Pretext | Adversaries may develop a cover story and supporting materials to justify their presence during physical operations. Pretext development aligns appearance, behavior, and artifacts with roles that are plausible at the target facility. |
| P0005.001 | Develop Pretext Story | Adversaries may craft a plausible narrative explaining why they are on site, who they represent, and what work they are performing. The story is tailored to facility roles, schedules, and observed security practices. |
| P0005.002 | Gather Pretext Props | Adversaries may obtain or assemble props that reinforce their cover story, such as clipboards, work orders, tool kits, delivery manifests, or branded materials associated with their claimed role. |
| P0005.003 | Gather Pretext Uniform | Adversaries may acquire clothing or uniforms that match roles expected at the facility, such as maintenance, cleaning, catering, security, or vendor attire. Uniforms increase perceived legitimacy during entry and movement. |