MITRE D3FENDdefensive technique
D3-ULA Unlock Account
- Tactic
- Restore
Definition
Restoring a user account's access to resources by unlocking a locked User Account.
Related
Counters · MITRE ATT&CK (20)
- T1548.005 Temporary Elevated Cloud Access sub-technique
- T0859 Valid Accounts technique
- T1078.001 Default Accounts sub-technique
- T1078.002 Domain Accounts sub-technique
- T1078.003 Local Accounts sub-technique
- T1078.004 Cloud Accounts sub-technique
- T1087.001 Local Account sub-technique
- T1087.002 Domain Account sub-technique
- T1087.004 Cloud Account sub-technique
- T1548 Abuse Elevation Control Mechanism technique
- T1136.003 Cloud Account sub-technique
- T1136.001 Local Account sub-technique
- T1136.002 Domain Account sub-technique
- T1098.002 Additional Email Delegate Permissions sub-technique
- T1098.003 Additional Cloud Roles sub-technique
- T1531 Account Access Removal technique
- T1136 Create Account technique
- T1078 Valid Accounts technique
- T1087 Account Discovery technique
- T1098 Account Manipulation technique
Child of · MITRE D3FEND (1)
- D3-RUAA Restore User Account Access defensive technique
References
- https://www.cisa.gov/sites/default/files/publications/Federal_Government_Cybersecurity_Incident_and_Vulnerability_Response_Playbooks_508C.pdf Cybersecurity Incident & Vulnerability Response Playbooks