Endpoint Denial of Service: Application Exhaustion Flood (T1499.003)

Tactic: Impact · Platforms: Windows, IaaS, Linux, macOS

The interactive view maps 1 detection strategy, 1 mitigation to this technique, alongside D3FEND countermeasures and data-component coverage.

Sub-technique of Endpoint Denial of Service (T1499).

Overview

Adversaries may target resource intensive features of applications to cause a denial of service (DoS), denying availability to those applications. For example, specific features in web applications may be highly resource intensive. Repeated requests to those features may be able to exhaust system resources and deny access to the application or the server itself.

Explore

• Open T1499.003 in the interactive ATT&CK matrix
• ATT&CK Intelligence View guide
• Official MITRE ATT&CK entry for T1499.003
• Sigma detection rules for MITRE ATT&CK
• Built by Shahrukh Khan