MITRE ATLAStactic

AML.TA0013 Credential Access

Published 2023-10-25 Modified 2023-10-25 Official page ↗
Created
2023-10-25

Description

The adversary is trying to steal account names and passwords. Credential Access consists of techniques for stealing credentials like account names and passwords. Techniques used to get credentials include keylogging or credential dumping. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals.

Related

Att&ck equivalent · MITRE ATT&CK (1)

  • TA0006 Credential Access tactic

Referenced by MITRE ATLAS · tactic (6)

  • AML.T0106 Exploitation for Credential Access technique
  • AML.T0098 AI Agent Tool Credential Harvesting technique
  • AML.T0090 OS Credential Dumping technique
  • AML.T0082 RAG Credential Harvesting technique
  • AML.T0083 Credentials from AI Agent Configuration technique
  • AML.T0055 Unsecured Credentials technique