CINXE.COM
Matrix - Enterprise - Identity Provider | MITRE ATT&CK®
<!DOCTYPE html> <html lang='en'> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=UA-62667723-1"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-62667723-1'); </script> <meta name="google-site-verification" content="2oJKLqNN62z6AOCb0A0IXGtbQuj-lev5YPAHFF_cbHQ"/> <meta charset='utf-8'> <meta name='viewport' content='width=device-width, initial-scale=1,shrink-to-fit=no'> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <link rel='shortcut icon' href='/theme/favicon.ico' type='image/x-icon'> <title>Matrix - Enterprise - Identity Provider | MITRE ATT&CK®</title> <!-- USWDS CSS --> <!-- Bootstrap CSS --> <link rel='stylesheet' href='/theme/style/bootstrap.min.css' /> <link rel='stylesheet' href='/theme/style/bootstrap-tourist.css' /> <link rel='stylesheet' href='/theme/style/bootstrap-select.min.css' /> <!-- Fontawesome CSS --> <link rel="stylesheet" href="/theme/style/fontawesome-6.5.1/css/fontawesome.min.css"/> <link rel="stylesheet" href="/theme/style/fontawesome-6.5.1/css/brands.min.css"/> <link rel="stylesheet" href="/theme/style/fontawesome-6.5.1/css/solid.min.css"/> <link rel="stylesheet" type="text/css" href="/theme/style.min.css?6689c2db"> </head> <body> <div class="container-fluid attack-website-wrapper d-flex flex-column h-100"> <div class="row sticky-top flex-grow-0 flex-shrink-1"> <!-- header elements --> <header class="col px-0"> <nav class='navbar navbar-expand-lg navbar-dark position-static'> <a class='navbar-brand' href='/'><img src="/theme/images/mitre_attack_logo.png" class="attack-logo"></a> <button class='navbar-toggler' type='button' data-toggle='collapse' data-target='#navbarCollapse' aria-controls='navbarCollapse' aria-expanded='false' aria-label='Toggle navigation'> <span class='navbar-toggler-icon'></span> </button> <div class='collapse navbar-collapse' id='navbarCollapse'> <ul class='nav nav-tabs ml-auto'> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/matrices/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Matrices</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/matrices/enterprise/">Enterprise</a> <a class="dropdown-item" href="/matrices/mobile/">Mobile</a> <a class="dropdown-item" href="/matrices/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/tactics/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Tactics</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/tactics/enterprise/">Enterprise</a> <a class="dropdown-item" href="/tactics/mobile/">Mobile</a> <a class="dropdown-item" href="/tactics/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/techniques/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Techniques</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/techniques/enterprise/">Enterprise</a> <a class="dropdown-item" href="/techniques/mobile/">Mobile</a> <a class="dropdown-item" href="/techniques/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/datasources" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Defenses</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/datasources">Data Sources</a> <div class="dropright dropdown"> <a class="dropdown-item dropdown-toggle" href="/mitigations/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Mitigations</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/mitigations/enterprise/">Enterprise</a> <a class="dropdown-item" href="/mitigations/mobile/">Mobile</a> <a class="dropdown-item" href="/mitigations/ics/">ICS</a> </div> </div> <a class="dropdown-item" href="/assets">Assets</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/groups" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>CTI</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/groups">Groups</a> <a class="dropdown-item" href="/software">Software</a> <a class="dropdown-item" href="/campaigns">Campaigns</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/resources/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Resources</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/resources/">Get Started</a> <a class="dropdown-item" href="/resources/learn-more-about-attack/">Learn More about ATT&CK</a> <a class="dropdown-item" href="/resources/attackcon/">ATT&CKcon</a> <a class="dropdown-item" href="/resources/attack-data-and-tools/">ATT&CK Data & Tools</a> <a class="dropdown-item" href="/resources/faq/">FAQ</a> <a class="dropdown-item" href="/resources/engage-with-attack/contact/">Engage with ATT&CK</a> <a class="dropdown-item" href="/resources/versions/">Version History</a> <a class="dropdown-item" href="/resources/legal-and-branding/">Legal & Branding</a> </div> </li> <li class="nav-item"> <a href="/resources/engage-with-attack/benefactors/" class="nav-link" ><b>Benefactors</b></a> </li> <li class="nav-item"> <a href="https://medium.com/mitre-attack/" target="_blank" class="nav-link"> <b>Blog</b> <img src="/theme/images/external-site.svg" alt="External site" class="external-icon" /> </a> </li> <li class="nav-item"> <button id="search-button" class="btn search-button">Search <div id="search-icon" class="icon-button search-icon"></div></button> </li> </ul> </div> </nav> </header> </div> <div class="row flex-grow-0 flex-shrink-1"> <!-- banner elements --> <div class="col px-0"> <!-- don't edit or remove the line below even though it's commented out, it gets parsed and replaced by the versioning feature --> <!-- !versions banner! --> <div class="container-fluid banner-message"> ATT&CK v16 has been released! Check out the <a href='https://medium.com/mitre-attack/attack-v16-561c76af94cf'>blog post</a> for more information. </div> </div> </div> <div class="row flex-grow-1 flex-shrink-0"> <!-- main content elements --> <!--start-indexing-for-search--> <div class="sidebar nav sticky-top flex-column pr-0 pt-4 pb-3 pl-3" id="v-tab" role="tablist" aria-orientation="vertical"> <div class="resizer" id="resizer"></div> <!--stop-indexing-for-search--> <div id="sidebars"></div> <!--start-indexing-for-search--> </div> <div class="tab-content col-xl-9 pt-4" id="v-tabContent"> <div class="tab-pane fade show active" id="v-attckmatrix" role="tabpanel" aria-labelledby="v-attckmatrix-tab"> <div class="row"> <div class="col-md-9"> <ol class="breadcrumb mx-0 px-1"> <li class="breadcrumb-item"><a href="/">Home</a></li> <li class="breadcrumb-item"><a href="/matrices/">Matrices</a></li> <li class="breadcrumb-item"><a href="/matrices/enterprise/">Enterprise</a></li> <li class="breadcrumb-item">Identity Provider</li> </ol> </div> </div> <div class="tab-pane fade show active" id="v-attckmatrix" role="tabpanel" aria-labelledby="v-attckmatrix-tab"> <div class="matrix-container p-3"> <div class="row"> <div class="col-md-9"> <h1>Identity Provider Matrix</h1> <p> Below are the tactics and techniques representing the MITRE ATT&CK<sup>®</sup> Identity Provider platform. The techniques below are known to target cloud-based identity-as-a-service (IDaaS) platforms such as Microsoft Entra ID and Okta. Identity providers are SaaS platforms that support identity management and single sign-on across multiple applications. The Matrix contains information for the Identity Provider platform. </p> </div> <div class="matrix-border col-md-3"> <div class="col py-2"> <!-- only show navigator link if it's defined in the config --> <div class="row p-2"> <a href="https://mitre-attack.github.io/attack-navigator/" target="_blank">View on the ATT&CK<sup>®</sup> Navigator <img src="/theme/images/external-site-dark.jpeg" width="10"></a> </div> <div class="row p-2"> <div class="version-button live"> <div class="live"> <a data-toggle="tooltip" data-placement="bottom" title="Permalink to this version of the matrix" href="/versions/v16/matrices/enterprise/cloud/identityprovider/" data-test-ignore="true">Version Permalink</a> </div> <div class="permalink"> <a data-toggle="tooltip" data-placement="bottom" title="Go to the live version of the matrix" href="/versions/v16/matrices/enterprise/cloud/identityprovider/" data-test-ignore="true">Live Version</a><!--do not change this line without also changing versions.py--> </div> </div> </div> </div> </div> </div> </div> <div class="pb-3"> <div id="tour-matrix-container"> <div class="matrix-controls"> <div class="btn-toolbar" role="toolbar" aria-label="matrix controls"> <div class="btn-group mr-2" role="group"> <div class="btn-group" role="group"> <button class="btn btn-default dropdown-toggle" id="layout-options" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false" data-selected_layout="side">layout: side</button> <div class="dropdown-menu" aria-labelledby="layout-options"> <a class="dropdown-item layout-button side active" href="#" onclick="showSideMatrix()"> side </a> <a class="dropdown-item layout-button flat" href="#" onclick="showFlatMatrix(); tour_layout_clicked() "> flat </a> </div> </div> </div> <div class="btn-group mr-2" role="group"> <button type="button" class="btn btn-default" onclick="toggleAllMatrixSubTechniques(true)">show sub-techniques</button> <button type="button" class="btn btn-default" onclick="toggleAllMatrixSubTechniques(false)">hide sub-techniques</button> </div> <!-- no help button on index page --> <div class="btn-group" role="group"> <button type="button" class="btn btn-default" onclick="start_tour()">help</button> </div> </div> </div> <div id="layouts-content"> <div class="matrix-type side"> <div class="matrix-container p-3"> <div class="scroll-indicator-group"> <div class="scroll-indicator left"> <div class="cover"></div> </div> <div class="overflow-x-auto matrix-scroll-box pb-3"> <table class="matrix side"> <thead> <tr> <td class="tactic name"><a href="/tactics/TA0001" data-toggle="tooltip" data-placement="top" title="TA0001">Initial Access</a></td> <td class="tactic name"><a href="/tactics/TA0002" data-toggle="tooltip" data-placement="top" title="TA0002">Execution</a></td> <td class="tactic name"><a href="/tactics/TA0003" data-toggle="tooltip" data-placement="top" title="TA0003">Persistence</a></td> <td class="tactic name"><a href="/tactics/TA0004" data-toggle="tooltip" data-placement="top" title="TA0004">Privilege Escalation</a></td> <td class="tactic name"><a href="/tactics/TA0005" data-toggle="tooltip" data-placement="top" title="TA0005">Defense Evasion</a></td> <td class="tactic name"><a href="/tactics/TA0006" data-toggle="tooltip" data-placement="top" title="TA0006">Credential Access</a></td> <td class="tactic name"><a href="/tactics/TA0007" data-toggle="tooltip" data-placement="top" title="TA0007">Discovery</a></td> <td class="tactic name"><a href="/tactics/TA0008" data-toggle="tooltip" data-placement="top" title="TA0008">Lateral Movement</a></td> </tr> <tr> <td class="tactic count"> 4 techniques </td> <td class="tactic count"> 1 techniques </td> <td class="tactic count"> 4 techniques </td> <td class="tactic count"> 4 techniques </td> <td class="tactic count"> 6 techniques </td> <td class="tactic count"> 8 techniques </td> <td class="tactic count"> 5 techniques </td> <td class="tactic count"> 1 techniques </td> </tr> </thead> <tbody> <tr> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6"> <a href="/techniques/T1189" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6" title="T1189">Drive-by Compromise</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b"> <a href="/techniques/T1566" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b" title="T1566">Phishing <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2b742742-28c3-4e1b-bab7-8350d6300fa7"> <a href="/techniques/T1566/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2b742742-28c3-4e1b-bab7-8350d6300fa7" title="T1566.002">Spearphishing Link</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bb5e59c4-abe7-40c7-8196-e373cb1e5974"> <a href="/techniques/T1566/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bb5e59c4-abe7-40c7-8196-e373cb1e5974" title="T1566.004">Spearphishing Voice</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925"> <a href="/techniques/T1199" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925" title="T1199">Trusted Relationship</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830"> <a href="/techniques/T1059" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830" title="T1059">Command and Scripting Interpreter <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--55bb4471-ff1f-43b4-88c1-c9384ec47abf"> <a href="/techniques/T1059/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--55bb4471-ff1f-43b4-88c1-c9384ec47abf" title="T1059.009">Cloud API</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <a href="/techniques/T1098" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" title="T1098">Account Manipulation <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd"> <a href="/techniques/T1098/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd" title="T1098.001">Additional Cloud Credentials</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3"> <a href="/techniques/T1098/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3" title="T1098.003">Additional Cloud Roles</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215"> <a href="/techniques/T1098/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215" title="T1098.005">Device Registration</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67"> <a href="/techniques/T1136" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67" title="T1136">Create Account <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a009cb25-4801-4116-9105-80a91cf15c1b"> <a href="/techniques/T1136/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a009cb25-4801-4116-9105-80a91cf15c1b" title="T1136.003">Cloud Account</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <a href="/techniques/T1548" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" title="T1548">Abuse Elevation Control Mechanism <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c"> <a href="/techniques/T1548/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c" title="T1548.005">Temporary Elevated Cloud Access</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <a href="/techniques/T1098" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" title="T1098">Account Manipulation <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd"> <a href="/techniques/T1098/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd" title="T1098.001">Additional Cloud Credentials</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3"> <a href="/techniques/T1098/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3" title="T1098.003">Additional Cloud Roles</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215"> <a href="/techniques/T1098/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215" title="T1098.005">Device Registration</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <a href="/techniques/T1484" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" title="T1484">Domain or Tenant Policy Modification <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee"> <a href="/techniques/T1484/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee" title="T1484.002">Trust Modification</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <a href="/techniques/T1548" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" title="T1548">Abuse Elevation Control Mechanism <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c"> <a href="/techniques/T1548/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c" title="T1548.005">Temporary Elevated Cloud Access</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <a href="/techniques/T1484" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" title="T1484">Domain or Tenant Policy Modification <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee"> <a href="/techniques/T1484/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee" title="T1484.002">Trust Modification</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529"> <a href="/techniques/T1562" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529" title="T1562">Impair Defenses <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cacc40da-4c9e-462c-80d5-fd70a178b12d"> <a href="/techniques/T1562/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cacc40da-4c9e-462c-80d5-fd70a178b12d" title="T1562.008">Disable or Modify Cloud Logs</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <a href="/techniques/T1550" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" title="T1550">Use Alternate Authentication Material <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51"> <a href="/techniques/T1550/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51" title="T1550.001">Application Access Token</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" id="tour-side-technique" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd"> <a href="/techniques/T1110" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd" title="T1110">Brute Force <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd sidebar--tour" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd'); tour_technique_clicked();"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td" id="tour-side-subtechniques" > <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd subtechniques--tour"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119"> <a href="/techniques/T1110/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119" title="T1110.001">Password Guessing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1d24cdee-9ea2-4189-b08e-af110bf2435d"> <a href="/techniques/T1110/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1d24cdee-9ea2-4189-b08e-af110bf2435d" title="T1110.002">Password Cracking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--692074ae-bb62-4a5e-a735-02cb6bde458c"> <a href="/techniques/T1110/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--692074ae-bb62-4a5e-a735-02cb6bde458c" title="T1110.003">Password Spraying</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b2d03cea-aec1-45ca-9744-9ee583c1e1cc"> <a href="/techniques/T1110/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b2d03cea-aec1-45ca-9744-9ee583c1e1cc" title="T1110.004">Credential Stuffing</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36"> <a href="/techniques/T1212" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36" title="T1212">Exploitation for Credential Access</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c"> <a href="/techniques/T1606" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c" title="T1606">Forge Web Credentials <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2"> <a href="/techniques/T1606/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2" title="T1606.002">SAML Tokens</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493"> <a href="/techniques/T1621" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493" title="T1621">Multi-Factor Authentication Request Generation</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a"> <a href="/techniques/T1528" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a" title="T1528">Steal Application Access Token</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331"> <a href="/techniques/T1649" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331" title="T1649">Steal or Forge Authentication Certificates</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517"> <a href="/techniques/T1552" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517" title="T1552">Unsecured Credentials</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08"> <a href="/techniques/T1087" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08" title="T1087">Account Discovery <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f104855-e5b7-4077-b1f5-bc3103b41abe"> <a href="/techniques/T1087/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f104855-e5b7-4077-b1f5-bc3103b41abe" title="T1087.004">Cloud Account</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f"> <a href="/techniques/T1538" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f" title="T1538">Cloud Service Dashboard</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db"> <a href="/techniques/T1526" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db" title="T1526">Cloud Service Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5"> <a href="/techniques/T1201" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5" title="T1201">Password Policy Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce"> <a href="/techniques/T1069" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce" title="T1069">Permission Groups Discovery <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--16e94db9-b5b1-4cd0-b851-f38fbd0a70f2"> <a href="/techniques/T1069/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--16e94db9-b5b1-4cd0-b851-f38fbd0a70f2" title="T1069.003">Cloud Groups</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <a href="/techniques/T1550" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" title="T1550">Use Alternate Authentication Material <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e', 'attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51"> <a href="/techniques/T1550/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51" title="T1550.001">Application Access Token</a> </div> </div> </div> </td> </tr> </table> </td> </tr> </tbody> </table> </div> <div class="scroll-indicator right"> <div class="cover"></div> </div> </div> <!-- TODO: Re-enable this once we figure out how to show the last modified timestamp of the latest domain release, not the Matrix object itself <div class="timestamp deemphasis text-center pt-3">Last modified: 01 April 2022</div> --> </div> </div> <div class="matrix-type flat d-none"> <div class="matrix-container p-3"> <div class="scroll-indicator-group"> <div class="scroll-indicator left"> <div class="cover"></div> </div> <div class="overflow-x-auto matrix-scroll-box pb-3"> <table class="matrix flat"> <thead> <tr> <td class="tactic name"><a href="/tactics/TA0001" data-toggle="tooltip" data-placement="top" title="TA0001">Initial Access</a></td> <td class="tactic name"><a href="/tactics/TA0002" data-toggle="tooltip" data-placement="top" title="TA0002">Execution</a></td> <td class="tactic name"><a href="/tactics/TA0003" data-toggle="tooltip" data-placement="top" title="TA0003">Persistence</a></td> <td class="tactic name"><a href="/tactics/TA0004" data-toggle="tooltip" data-placement="top" title="TA0004">Privilege Escalation</a></td> <td class="tactic name"><a href="/tactics/TA0005" data-toggle="tooltip" data-placement="top" title="TA0005">Defense Evasion</a></td> <td class="tactic name"><a href="/tactics/TA0006" data-toggle="tooltip" data-placement="top" title="TA0006">Credential Access</a></td> <td class="tactic name"><a href="/tactics/TA0007" data-toggle="tooltip" data-placement="top" title="TA0007">Discovery</a></td> <td class="tactic name"><a href="/tactics/TA0008" data-toggle="tooltip" data-placement="top" title="TA0008">Lateral Movement</a></td> </tr> <tr> <td class="tactic count"> 4 techniques </td> <td class="tactic count"> 1 techniques </td> <td class="tactic count"> 4 techniques </td> <td class="tactic count"> 4 techniques </td> <td class="tactic count"> 6 techniques </td> <td class="tactic count"> 8 techniques </td> <td class="tactic count"> 5 techniques </td> <td class="tactic count"> 1 techniques </td> </tr> </thead> <tbody> <tr> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6"> <a href="/techniques/T1189" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6" title="T1189">Drive-by Compromise</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b"> <a href="/techniques/T1566" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b" title="T1566">Phishing <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2b742742-28c3-4e1b-bab7-8350d6300fa7"> <a href="/techniques/T1566/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2b742742-28c3-4e1b-bab7-8350d6300fa7" title="T1566.002">Spearphishing Link</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bb5e59c4-abe7-40c7-8196-e373cb1e5974"> <a href="/techniques/T1566/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bb5e59c4-abe7-40c7-8196-e373cb1e5974" title="T1566.004">Spearphishing Voice</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925"> <a href="/techniques/T1199" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925" title="T1199">Trusted Relationship</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830"> <a href="/techniques/T1059" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830" title="T1059">Command and Scripting Interpreter <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--55bb4471-ff1f-43b4-88c1-c9384ec47abf"> <a href="/techniques/T1059/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--55bb4471-ff1f-43b4-88c1-c9384ec47abf" title="T1059.009">Cloud API</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <a href="/techniques/T1098" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" title="T1098">Account Manipulation <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd"> <a href="/techniques/T1098/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd" title="T1098.001">Additional Cloud Credentials</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3"> <a href="/techniques/T1098/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3" title="T1098.003">Additional Cloud Roles</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215"> <a href="/techniques/T1098/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215" title="T1098.005">Device Registration</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67"> <a href="/techniques/T1136" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67" title="T1136">Create Account <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a009cb25-4801-4116-9105-80a91cf15c1b"> <a href="/techniques/T1136/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a009cb25-4801-4116-9105-80a91cf15c1b" title="T1136.003">Cloud Account</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <a href="/techniques/T1548" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" title="T1548">Abuse Elevation Control Mechanism <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c"> <a href="/techniques/T1548/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c" title="T1548.005">Temporary Elevated Cloud Access</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <a href="/techniques/T1098" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" title="T1098">Account Manipulation <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd"> <a href="/techniques/T1098/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd" title="T1098.001">Additional Cloud Credentials</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3"> <a href="/techniques/T1098/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3" title="T1098.003">Additional Cloud Roles</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215"> <a href="/techniques/T1098/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215" title="T1098.005">Device Registration</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <a href="/techniques/T1484" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" title="T1484">Domain or Tenant Policy Modification <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee"> <a href="/techniques/T1484/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee" title="T1484.002">Trust Modification</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <a href="/techniques/T1548" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" title="T1548">Abuse Elevation Control Mechanism <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c"> <a href="/techniques/T1548/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c" title="T1548.005">Temporary Elevated Cloud Access</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <a href="/techniques/T1484" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" title="T1484">Domain or Tenant Policy Modification <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee"> <a href="/techniques/T1484/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee" title="T1484.002">Trust Modification</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529"> <a href="/techniques/T1562" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529" title="T1562">Impair Defenses <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cacc40da-4c9e-462c-80d5-fd70a178b12d"> <a href="/techniques/T1562/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cacc40da-4c9e-462c-80d5-fd70a178b12d" title="T1562.008">Disable or Modify Cloud Logs</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <a href="/techniques/T1550" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" title="T1550">Use Alternate Authentication Material <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51"> <a href="/techniques/T1550/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51" title="T1550.001">Application Access Token</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique" id="tour-flat-technique" > <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd sidebar--tour" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd'); tour_technique_clicked();"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd"> <a href="/techniques/T1110" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd" title="T1110">Brute Force <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd subtechniques--tour"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques" id="tour-flat-subtechniques" > <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119"> <a href="/techniques/T1110/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119" title="T1110.001">Password Guessing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1d24cdee-9ea2-4189-b08e-af110bf2435d"> <a href="/techniques/T1110/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1d24cdee-9ea2-4189-b08e-af110bf2435d" title="T1110.002">Password Cracking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--692074ae-bb62-4a5e-a735-02cb6bde458c"> <a href="/techniques/T1110/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--692074ae-bb62-4a5e-a735-02cb6bde458c" title="T1110.003">Password Spraying</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b2d03cea-aec1-45ca-9744-9ee583c1e1cc"> <a href="/techniques/T1110/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b2d03cea-aec1-45ca-9744-9ee583c1e1cc" title="T1110.004">Credential Stuffing</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36"> <a href="/techniques/T1212" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36" title="T1212">Exploitation for Credential Access</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c"> <a href="/techniques/T1606" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c" title="T1606">Forge Web Credentials <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2"> <a href="/techniques/T1606/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2" title="T1606.002">SAML Tokens</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493"> <a href="/techniques/T1621" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493" title="T1621">Multi-Factor Authentication Request Generation</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a"> <a href="/techniques/T1528" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a" title="T1528">Steal Application Access Token</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331"> <a href="/techniques/T1649" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331" title="T1649">Steal or Forge Authentication Certificates</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517"> <a href="/techniques/T1552" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517" title="T1552">Unsecured Credentials</a> </div> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08"> <a href="/techniques/T1087" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08" title="T1087">Account Discovery <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f104855-e5b7-4077-b1f5-bc3103b41abe"> <a href="/techniques/T1087/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f104855-e5b7-4077-b1f5-bc3103b41abe" title="T1087.004">Cloud Account</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f"> <a href="/techniques/T1538" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f" title="T1538">Cloud Service Dashboard</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db"> <a href="/techniques/T1526" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db" title="T1526">Cloud Service Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5"> <a href="/techniques/T1201" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5" title="T1201">Password Policy Discovery</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce"> <a href="/techniques/T1069" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce" title="T1069">Permission Groups Discovery <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--16e94db9-b5b1-4cd0-b851-f38fbd0a70f2"> <a href="/techniques/T1069/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--16e94db9-b5b1-4cd0-b851-f38fbd0a70f2" title="T1069.003">Cloud Groups</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e', 'attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <a href="/techniques/T1550" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" title="T1550">Use Alternate Authentication Material <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51"> <a href="/techniques/T1550/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51" title="T1550.001">Application Access Token</a> </div> </div> </td> </tr> </table> </td> </tr> </tbody> </table> </div> <div class="scroll-indicator right"> <div class="cover"></div> </div> </div> <!-- TODO: Re-enable this once we figure out how to show the last modified timestamp of the latest domain release, not the Matrix object itself <div class="timestamp deemphasis text-center pt-3">Last modified: 01 April 2022</div> --> </div> </div> </div> </div> </div> </div> </div> </div> <!--stop-indexing-for-search--> <!-- search overlay for entire page -- not displayed inline --> <div class="overlay search" id="search-overlay" style="display: none;"> <div class="overlay-inner"> <!-- text input for searching --> <div class="search-header"> <div class="search-input"> <input type="text" id="search-input" placeholder="search"> </div> <div class="search-icons"> <div class="search-parsing-icon spinner-border" style="display: none" id="search-parsing-icon"></div> <div class="close-search-icon" id="close-search-icon">×</div> </div> </div> <!-- results and controls for loading more results --> <div id="search-body" class="search-body"> <div class="results" id="search-results"> <!-- content will be appended here on search --> </div> <div id="load-more-results" class="load-more-results"> <button class="btn btn-default" id="load-more-results-button">load more results</button> </div> </div> </div> </div> </div> <div class="row flex-grow-0 flex-shrink-1"> <!-- footer elements --> <footer class="col footer"> <div class="container-fluid"> <div class="row row-footer"> <div class="col-2 col-sm-2 col-md-2"> <div class="footer-center-responsive my-auto"> <a href="https://www.mitre.org" target="_blank" rel="noopener" aria-label="MITRE"> <img src="/theme/images/mitrelogowhiteontrans.gif" class="mitre-logo-wtrans"> </a> </div> </div> <div class="col-2 col-sm-2 footer-responsive-break"></div> <div class="footer-link-group"> <div class="row row-footer"> <div class="px-3 col-footer"> <u class="footer-link"><a href="/resources/engage-with-attack/contact" class="footer-link">Contact Us</a></u> </div> <div class="px-3 col-footer"> <u class="footer-link"><a href="/resources/legal-and-branding/terms-of-use" class="footer-link">Terms of Use</a></u> </div> <div class="px-3 col-footer"> <u class="footer-link"><a href="/resources/legal-and-branding/privacy" class="footer-link">Privacy Policy</a></u> </div> <div class="px-3"> <u class="footer-link"><a href="/resources/changelog.html" class="footer-link" data-toggle="tooltip" data-placement="top" data-html="true" title="ATT&CK content v16.1
Website v4.2.1">Website Changelog</a></u> </div> </div> <div class="row"> <small class="px-3"> © 2015 - 2024, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation. </small> </div> </div> <div class="w-100 p-2 footer-responsive-break"></div> <div class="col pr-4"> <div class="footer-float-right-responsive-brand"> <div class="row row-footer row-footer-icon"> <div class="mb-1"> <a href="https://twitter.com/MITREattack" class="btn btn-footer"> <i class="fa-brands fa-x-twitter fa-lg"></i> </a> <a href="https://github.com/mitre-attack" class="btn btn-footer"> <i class="fa-brands fa-github fa-lg"></i> </a> </div> </div> </div> </div> </div> </div> </div> </footer> </div> </div> <!--stopindex--> </div> <!--SCRIPTS--> <!--SCRIPTS--> <script src="/theme/scripts/jquery-3.5.1.min.js"></script> <script src="/theme/scripts/popper.min.js"></script> <script src="/theme/scripts/bootstrap-select.min.js"></script> <script src="/theme/scripts/bootstrap.bundle.min.js"></script> <script src="/theme/scripts/site.js"></script> <script src="/theme/scripts/settings.js"></script> <script src="/theme/scripts/search_bundle.js"></script> <!--SCRIPTS--> <script src="/theme/scripts/resizer.js"></script> <script src="/theme/scripts/matrix.js"></script> <script src="/theme/scripts/bootstrap-tourist.js"></script> <script src="/theme/scripts/settings.js"></script> <script src="/theme/scripts/tour/tour-matrices.js"></script> <script src="/theme/scripts/sidebar-load-all.js"></script> </body> </html>