CmdID / Techniques / T1078

T1078.002 Valid Accounts: Domain Accounts

Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. MITRE ATT&CK

1 Sigma rule T1078.002 on attack.mitre.org

Part of

MITRE ATT&CK

T1078Valid Accounts

Sigma rules tagged with it

process creation, the highest levels first

mediumNew DMSA Service Account Created in Specific OUsSwachchhanda Shrawan Poudel (Nextron Systems) · Windows