CmdID / Techniques / T1078

T1078.003 Valid Accounts: Local Accounts

Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. MITRE ATT&CK

4 Sigma rules T1078.003 on attack.mitre.org