Cachedump - S0119 (c9cd7ec9-40b7-49db-80be-1399eddd9c52)

Cachedump is a publicly-available tool that program extracts cached password hashes from a system’s registry. (Citation: Mandiant APT1)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Cached Domain Credentials - T1003.005 (6add2ab5-2711-4e9d-87c8-7a0be8531530)	Attack Pattern	Cachedump - S0119 (c9cd7ec9-40b7-49db-80be-1399eddd9c52)	mitre-tool	1
OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22)	Attack Pattern	Cached Domain Credentials - T1003.005 (6add2ab5-2711-4e9d-87c8-7a0be8531530)	Attack Pattern	2