T1586 Compromise Accounts
Adversaries may compromise accounts with services that can be used during targeting. For operations incorporating social engineering, the utilization of an online persona may be important. Rather than creating and cultivating accounts (i.e. [Establish Accounts](https://attack.mitre.org/techniques/T1585)), adversaries may compromise existing accounts. Utilizing an existing persona may engender a…
Who uses it · with stories on Jábega
Sigma rules to hunt it
- Bitbucket Unauthorized Access To A Resourcecriticaltest · bitbucket
- Bitbucket Unauthorized Full Data Export Triggeredcriticaltest · bitbucket
- Okta Suspicious Activity Reported by End-userhightest · okta
Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.