CmdID / Techniques / T1078

T1078.001 Valid Accounts: Default Accounts

Adversaries may obtain and abuse credentials of a default account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. MITRE ATT&CK

3 Sigma rules T1078.001 on attack.mitre.org