Exploitation for Credential Access
Description
Adversaries may exploit software vulnerabilities in an attempt to collect credentials. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code.
- ATLAS ID
- AML.T0106
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Enterprise
Mitigations
- AML.M0016Vulnerability Scanning
Vulnerability scanning identifies and remediates software flaws before they can be exploited to obtain credentials.
Case studies that use it
Related ATT&CK technique
ATLAS adapts this technique from MITRE ATT&CK Enterprise.
Across MITRE's defensive frameworks
Linked through the 1 ATT&CK technique above.
Counter with D3FEND
Defensive techniques MITRE D3FEND maps to the same ATT&CK techniques.