Credential Access
MITRE ID : T1003.005 Tactic : Credential Access Platforms: Windows Cached Domain Credentials Cached domain credentials allows authentication to occur in the event a domain controller is ...
MITRE ID : T1003.006 Tactic : Credential Access Platforms: Windows DCSync DCSync attack simulates the behavior of a Domain Controller and asks other Domain Controllers to replicate infor...
MITRE ID : T1003.008 Tactic : Credential Access Platforms: Linux /etc/passwd and /etc/shadow Most modern Linux operating systems use a combination of /etc/passwd and /etc/shadow to store...
Collection
Discovery
