MITRE ATT&CKsoftware (tool)

S0002 Mimikatz

Published 2017-05-31 Modified 2026-05-12 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.11
Created
2017-05-31

Description

Mimikatz is a credential dumper capable of obtaining plaintext Windows account logins and passwords, along with many other features that make it useful for testing the security of networks.

Related

Uses · MITRE ATT&CK (17)

  • T1649 Steal or Forge Authentication Certificates technique
  • T1555.004 Windows Credential Manager sub-technique
  • T1003.004 LSA Secrets sub-technique
  • T1134.005 SID-History Injection sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1003.001 LSASS Memory sub-technique
  • T1003.002 Security Account Manager sub-technique
  • T1003.006 DCSync sub-technique
  • T1555 Credentials from Password Stores technique
  • T1558.001 Golden Ticket sub-technique
  • T1558.002 Silver Ticket sub-technique
  • T1552.004 Private Keys sub-technique
  • T1550.002 Pass the Hash sub-technique
  • T1550.003 Pass the Ticket sub-technique
  • T1547.005 Security Support Provider sub-technique
  • T1207 Rogue Domain Controller technique
  • T1098 Account Manipulation technique

Referenced by MITRE ATT&CK · uses (60)

  • C0061 Operation Digital Eye campaign
  • C0058 SharePoint ToolShell Exploitation campaign
  • G1051 Medusa Group group
  • G1043 BlackByte group
  • G1040 Play group
  • C0038 HomeLand Justice campaign
  • G1030 Agrius group
  • C0032 C0032 campaign
  • C0030 Triton Safety Instrumented System Attack campaign
  • G1024 Akira group
  • G1023 APT5 group
  • G1016 FIN13 group
  • G1017 Volt Typhoon group
  • G1015 Scattered Spider group
  • C0024 SolarWinds Compromise campaign
  • C0018 C0018 campaign
  • C0017 C0017 campaign
  • C0014 Operation Wocao campaign
  • G1006 Earth Lusca group
  • G1004 LAPSUS$ group
  • G0135 BackdoorDiplomacy group
  • G0131 Tonto Team group
  • G0129 Mustang Panda group
  • G0119 Indrik Spider group
  • G0114 Chimera group
  • G0107 Whitefly group
  • G0108 Blue Mockingbird group
  • G0102 Wizard Spider group
  • G0096 APT41 group
  • G0094 Kimsuky group
Show all 60 ›

References