Skip to content

<<< Hide Navigation Hide TOC >>>

Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78)

Determining which credentials may have been compromised by analyzing the user logon history of a particular system.

Galaxy ColorsAttack Pat...MITRE D3FE...
Rows: 33
Loading extensions...
Collapse filters
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.2

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Cluster A Galaxy A Cluster B Galaxy B Level
Cached Domain Credentials - T1003.005 (6add2ab5-2711-4e9d-87c8-7a0be8531530) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Keychain - T1142 (9e09ddb2-1746-4448-9cad-7f8b41777d6d) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND /etc/passwd and /etc/shadow - T1003.008 (d0b4fcdb-d67d-4ed2-99ce-788b12f8c0f4) Attack Pattern 1
Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND Golden Ticket - T1558.001 (768dce68-8d0d-477a-b01d-0eea98b963a1) Attack Pattern 1
Application Access Token - T1550.001 (f005e783-57d4-4837-88ad-dbe7faee1c51) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Token Impersonation/Theft - T1134.001 (86850eff-2729-40c3-b85e-c4af26da4a2d) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Steal Application Access Token - T1528 (890c9858-598c-401d-a4d5-c67ebcdd703a) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Make and Impersonate Token - T1134.003 (8cdeb020-e31e-4f88-a582-f53dcfbda819) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Password Cracking - T1110.002 (1d24cdee-9ea2-4189-b08e-af110bf2435d) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND Steal Web Session Cookie - T1539 (10ffac09-e42d-4f56-ab20-db94c67d76ff) Attack Pattern 1
NTDS - T1003.003 (edf91964-b26e-4b4a-9600-ccacd7d7df24) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Additional Cloud Credentials - T1098.001 (8a2f40cf-8325-47f9-96e4-b1ca4c7389bd) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND Password Guessing - T1110.001 (09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119) Attack Pattern 1
Unsecured Credentials - T1552 (435dfb86-2697-4867-85b5-2fef496c0517) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Web Session Cookie - T1550.004 (c3c8c916-2f3c-4e71-94b2-240bdfc996f0) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Steal or Forge Kerberos Tickets - T1558 (3fc01293-ef5e-41c6-86ce-61f10706b64a) Attack Pattern Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND 1
Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND Create Process with Token - T1134.002 (677569f9-a8b0-459e-ab24-7f18091fa7bf) Attack Pattern 1
Credential Compromise Scope Analysis (cfc9c8f1-ed4b-5631-9ac2-34da65615f78) MITRE D3FEND Password Spraying - T1110.003 (692074ae-bb62-4a5e-a735-02cb6bde458c) Attack Pattern 1
Cached Domain Credentials - T1003.005 (6add2ab5-2711-4e9d-87c8-7a0be8531530) Attack Pattern OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22) Attack Pattern 2
Keychain - T1142 (9e09ddb2-1746-4448-9cad-7f8b41777d6d) Attack Pattern Keychain - T1555.001 (1eaebf46-e361-4437-bc23-d5d65a3b92e3) Attack Pattern 2
OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22) Attack Pattern /etc/passwd and /etc/shadow - T1003.008 (d0b4fcdb-d67d-4ed2-99ce-788b12f8c0f4) Attack Pattern 2
Steal or Forge Kerberos Tickets - T1558 (3fc01293-ef5e-41c6-86ce-61f10706b64a) Attack Pattern Golden Ticket - T1558.001 (768dce68-8d0d-477a-b01d-0eea98b963a1) Attack Pattern 2
Application Access Token - T1550.001 (f005e783-57d4-4837-88ad-dbe7faee1c51) Attack Pattern Use Alternate Authentication Material - T1550 (51a14c76-dd3b-440b-9c20-2bf91d25a814) Attack Pattern 2
Access Token Manipulation - T1134 (dcaa092b-7de9-4a21-977f-7fcb77e89c48) Attack Pattern Token Impersonation/Theft - T1134.001 (86850eff-2729-40c3-b85e-c4af26da4a2d) Attack Pattern 2
Access Token Manipulation - T1134 (dcaa092b-7de9-4a21-977f-7fcb77e89c48) Attack Pattern Make and Impersonate Token - T1134.003 (8cdeb020-e31e-4f88-a582-f53dcfbda819) Attack Pattern 2
Brute Force - T1110 (a93494bb-4b80-4ea1-8695-3236a49916fd) Attack Pattern Password Cracking - T1110.002 (1d24cdee-9ea2-4189-b08e-af110bf2435d) Attack Pattern 2
NTDS - T1003.003 (edf91964-b26e-4b4a-9600-ccacd7d7df24) Attack Pattern OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22) Attack Pattern 2
Additional Cloud Credentials - T1098.001 (8a2f40cf-8325-47f9-96e4-b1ca4c7389bd) Attack Pattern Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) Attack Pattern 2
Brute Force - T1110 (a93494bb-4b80-4ea1-8695-3236a49916fd) Attack Pattern Password Guessing - T1110.001 (09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119) Attack Pattern 2
Web Session Cookie - T1550.004 (c3c8c916-2f3c-4e71-94b2-240bdfc996f0) Attack Pattern Use Alternate Authentication Material - T1550 (51a14c76-dd3b-440b-9c20-2bf91d25a814) Attack Pattern 2
Access Token Manipulation - T1134 (dcaa092b-7de9-4a21-977f-7fcb77e89c48) Attack Pattern Create Process with Token - T1134.002 (677569f9-a8b0-459e-ab24-7f18091fa7bf) Attack Pattern 2
Brute Force - T1110 (a93494bb-4b80-4ea1-8695-3236a49916fd) Attack Pattern Password Spraying - T1110.003 (692074ae-bb62-4a5e-a735-02cb6bde458c) Attack Pattern 2
Credentials from Password Stores - T1555 (3fc9b85a-2862-4363-a64d-d692e3ffbee0) Attack Pattern Keychain - T1555.001 (1eaebf46-e361-4437-bc23-d5d65a3b92e3) Attack Pattern 3