Cybersecurity from Málaga · Networks, lures and threats

← Threats
MITRE ATT&CK technique · stealth, Persistence, Privilege Escalation, Initial Access

T1078 Valid Accounts

Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be used for persistent access to remote systems and externally available services, such as VPNs, Outlook…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

Sigma rules to hunt it

Showing 25 of 82.

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.