SPARTA Tactics

SPARTA Tactics (ST) represent the “why” of a SPARTA technique or sub-technique. It is the threat actor’s tactical goal and the reason they are performing a technique. For example, a threat actor may want to achieve initial access on a spacecraft via cyber means.

ID Name Description
ST0001 Reconnaissance Threat actor is trying to gather information they can use to plan future operations.
ST0002 Resource Development Threat actor is trying to establish resources they can use to support operations.
ST0003 Initial Access Threat actor is trying to get point of presence/command execution on the spacecraft
ST0004 Execution Threat actor is trying to execute malicious code on the spacecraft
ST0005 Persistence Threat actor is trying to maintain their foothold/access to command/execute code on the spacecraft.
ST0006 Defense Evasion Threat actor is trying to avoid being detected.
ST0007 Lateral Movement Threat actor is trying to move through across sub-systems of the spacecraft.
ST0008 Exfiltration Threat actor is trying to steal information.
ST0009 Impact Threat actor is trying to manipulate, interrupt, or destroy the space system(s) and/or data.