Técnica MITRE ATT&CK · defense-impairment, Persistencia, Acceso a credenciales

`T1556.007` Hybrid Identity

Subtécnica de T1556 Modify Authentication Process

Adversaries may patch, modify, or otherwise backdoor cloud authentication processes that are tied to on-premises user identities in order to bypass typical authentication mechanisms, access credentials, and enable persistent access to accounts. Many organizations maintain hybrid user and device identities that are shared between on-premises and cloud-based environments. These can be maintained…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

APT29

Reglas Sigma para cazarla

SigmaHQ no tiene reglas para esta técnica.

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.