Files
MBCProject-mbc-markdown/credential-access

ID M9005

Credential Access

Behaviors to obtain credential access, allowing it or its underlying threat actor to assume control of an account, with the associated system and network permissions.

  • Access Sensitive Data or Credentials in Files T1409
  • Account Manipulation T1098
  • Capture SMS Messages T1412
  • Credential Dumping T1003
  • Credentials in Files T1081
  • Credentials in Registry T1214
  • Credentials in Web Browsers T1503
  • Hooking E1179
  • Input Capture T1056
  • LLMNR/NBT-NS Poisoning T1171
  • Network Sniffing T1040
  • Private Keys T1145