T1555 - Credentials from Password Stores - MITRE ATT&CK

T1555 - Credentials from Password Stores

Tattiche:
Credential Access

Piattaforme:
IaaS Linux macOS Windows

Rilevamento:
Not specified

Description:

Adversaries may search for common password storage locations to obtain user credentials.(Citation: F-Secure The Dukes) Passwords are stored in several places on a system, depending on the operating system or application holding the credentials. There are also specific applications and services that store passwords to make them easier for users to manage and maintain, such as password managers and cloud secrets vaults. Once credentials are obtained, they can be used to perform lateral movement and access restricted information.

Sub-tecniche (6)

ID	ATT&CK	Azioni
T1555.001	Keychain
T1555.002	Securityd Memory
T1555.003	Credentials from Web Browsers
T1555.004	Windows Credential Manager
T1555.005	Password Managers
T1555.006	Cloud Secrets Management Stores