MITRE ATT&CK technique · Discovery

`T1201` Password Policy Discovery

Adversaries may attempt to access detailed information about the password policy used within an enterprise network or cloud environment. Password policies are a way to enforce complex passwords that are difficult to guess or crack through [Brute Force](https://attack.mitre.org/techniques/T1110). This information may help the adversary to create a list of common passwords and launch dictionary…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

Turla

Sigma rules to hunt it

HackTool - CrackMapExec Executionhightest · windows
Password Policy Enumeratedmediumtest · windows

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.