MITRE D3FENDdefensive technique

D3-CDP Change Default Password

Official page ↗
Tactic
Harden

Definition

Changing the default password means replacing the factory-set credentials with a strong, unique password before the device is deployed, preventing unauthorized access.

How it works

How it works Change the default password as soon as a new device is received. The default credentials are normally documented in an instruction manual that is either packaged with the device, published online through official means, or published online through unofficial means. Considerations • These should be changed before a device is brought online so that an adversary cannot take advantage of these default credentials. • Strong and complex passwords are preferred if the technology allows.

Related

Counters · MITRE ATT&CK (25)

  • T1548.005 Temporary Elevated Cloud Access sub-technique
  • T0848 Rogue Master technique
  • T0859 Valid Accounts technique
  • T1078.001 Default Accounts sub-technique
  • T1078.002 Domain Accounts sub-technique
  • T1078.003 Local Accounts sub-technique
  • T1078.004 Cloud Accounts sub-technique
  • T1087.001 Local Account sub-technique
  • T1087.002 Domain Account sub-technique
  • T1087.004 Cloud Account sub-technique
  • T1110.001 Password Guessing sub-technique
  • T1110.002 Password Cracking sub-technique
  • T1110.003 Password Spraying sub-technique
  • T1548 Abuse Elevation Control Mechanism technique
  • T1136.003 Cloud Account sub-technique
  • T1136.001 Local Account sub-technique
  • T1136.002 Domain Account sub-technique
  • T1098.002 Additional Email Delegate Permissions sub-technique
  • T1098.003 Additional Cloud Roles sub-technique
  • T1531 Account Access Removal technique
  • T1136 Create Account technique
  • T1078 Valid Accounts technique
  • T1087 Account Discovery technique
  • T1098 Account Manipulation technique
  • T1110 Brute Force technique

Child of · MITRE D3FEND (1)

  • D3-SPP Strong Password Policy defensive technique

References