Hide Navigation Hide TOC Cisco Collect Data (cd072b25-a418-4f98-8ebc-5093fb38fe1a) Collect pertinent data from the configuration files Cluster A Galaxy A Cluster B Galaxy B Level Data from Local System - T1005 (3c4a2599-71ee-4405-ba1e-0e28414b4bc5) Attack Pattern Cisco Collect Data (cd072b25-a418-4f98-8ebc-5093fb38fe1a) Sigma-Rules 1 Local Account - T1087.001 (25659dd6-ea12-45c4-97e6-381e3e4b593e) Attack Pattern Cisco Collect Data (cd072b25-a418-4f98-8ebc-5093fb38fe1a) Sigma-Rules 1 Cisco Collect Data (cd072b25-a418-4f98-8ebc-5093fb38fe1a) Sigma-Rules Credentials In Files - T1552.001 (837f9164-50af-4ac0-8219-379d8a74cefc) Attack Pattern 1 Local Account - T1087.001 (25659dd6-ea12-45c4-97e6-381e3e4b593e) Attack Pattern Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) Attack Pattern 2 Unsecured Credentials - T1552 (435dfb86-2697-4867-85b5-2fef496c0517) Attack Pattern Credentials In Files - T1552.001 (837f9164-50af-4ac0-8219-379d8a74cefc) Attack Pattern 2