Hide Navigation Hide TOC Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) Requiring proof of two or more pieces of evidence in order to authenticate a user. Cluster A Galaxy A Cluster B Galaxy B Level Account Access Removal - T1531 (b24e2a20-3b3d-4bf0-823b-1ed765398fb0) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Default Accounts - T1078.001 (6151cbea-819b-455a-9fa6-99a1cc58797d) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Local Account - T1087.001 (25659dd6-ea12-45c4-97e6-381e3e4b593e) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Domain Accounts - T1078.002 (c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Local Accounts - T1078.003 (fdc47f44-dd32-4b99-af5f-209f556f63c2) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Domain Account - T1087.002 (21875073-b0ee-49e3-9077-1e2a885359af) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Additional Cloud Roles - T1098.003 (2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Additional Email Delegate Permissions - T1098.002 (e74de37c-a829-446c-937d-56a44f0e9306) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Create Account - T1136 (e01be9c5-e763-4caf-aeb7-000b416aef67) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Cloud Account - T1087.004 (8f104855-e5b7-4077-b1f5-bc3103b41abe) Attack Pattern Multi-factor Authentication (f0b9dd4e-6891-54be-bfd8-2d9cff119944) MITRE D3FEND 1 Default Accounts - T1078.001 (6151cbea-819b-455a-9fa6-99a1cc58797d) Attack Pattern Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern 2 Local Account - T1087.001 (25659dd6-ea12-45c4-97e6-381e3e4b593e) Attack Pattern Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) Attack Pattern 2 Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern Domain Accounts - T1078.002 (c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f) Attack Pattern 2 Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern Local Accounts - T1078.003 (fdc47f44-dd32-4b99-af5f-209f556f63c2) Attack Pattern 2 Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) Attack Pattern Domain Account - T1087.002 (21875073-b0ee-49e3-9077-1e2a885359af) Attack Pattern 2 Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) Attack Pattern Additional Cloud Roles - T1098.003 (2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3) Attack Pattern 2 Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) Attack Pattern Additional Email Delegate Permissions - T1098.002 (e74de37c-a829-446c-937d-56a44f0e9306) Attack Pattern 2 Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65) Attack Pattern Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern 2 Cloud Account - T1087.004 (8f104855-e5b7-4077-b1f5-bc3103b41abe) Attack Pattern Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) Attack Pattern 2