Técnica MITRE ATT&CK · Acceso a credenciales

`T1555.001` Keychain

Subtécnica de T1555 Credentials from Password Stores

Adversaries may acquire credentials from Keychain. Keychain (or Keychain Services) is the macOS credential management system that stores account names, passwords, private keys, certificates, sensitive application data, payment data, and secure notes. There are three types of Keychains: Login Keychain, System Keychain, and Local Items (iCloud) Keychain. The default Keychain is the Login Keychain,…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

GlassWorm

Reglas Sigma para cazarla

Credentials from Password Stores - Keychainmediumtest · macos

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.