Hardware Additions

Adversaries may physically introduce computer accessories, networking hardware, or other computing devices into a system or network as a way to gain access or add capabilities that can be abused. Depending on the device, interface, and configuration, hardware additions can provide passive network visibility, modify traffic, inject keystrokes, add wireless access, or enable direct memory access (DMA). This concerns introducing hardware into the target environment; distributing payloads through removable media is covered separately by Replication Through Removable Media (T1091).