CIS-5.2 Use Unique Passwords

• T1078 Valid Accounts — Unique passwords reduce credential reuse across systems and accounts, limiting adversary use of one compromised password to pivot through valid accounts. • T1078.001 Default Accounts — Unique passwords reduce adversary use of default or vendor-provided account credentials. • T1078.002 Domain Accounts — Domain accounts can span users, admins, and services; unique passwords reduce domain credential reuse and lateral reuse risk. • T1078.003 Local Accounts — Unique local passwords reduce reuse of one compromised local account credential across multiple endpoints or servers. • T1078.004 Cloud Accounts — Unique passwords reduce cloud/SaaS credential overlap and lateral reuse risk • T1110 Brute Force — Unique passwords and minimum password lengths, which directly reduce the effectiveness of brute-force attacks by increasing the number of possible password combinations and limiting the reuse of compromised credentials across systems. This makes online password guessing and offline password cracking more difficult and reduces the success of credential-stuffing attacks. • T1110.001 Password Guessing — Enforced minimum password length increases the search space and reduces the effectiveness of password guessing. • T1110.002 Password Cracking — Longer passwords materially increase the effort required to recover plaintext passwords from captured hashes or related material. • T1110.003 Password Spraying — Unique, non-common passwords reduce success of spraying common passwords across many accounts. • T1110.004 Credential Stuffing — This directly counters password overlap from breached credentials reused across personal, third-party, and enterprise accounts.