T1078.004_cloud-accounts
Valid accounts in cloud environments may allow adversaries to perform actions to achieve Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Valid accounts in cloud environments may allow adversaries to perform actions to achieve Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
Adversaries may deliver payloads to remote systems by adding content to shared storage locations, such as network drives or internal code repositories.
An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
Adversaries may attempt to get a listing of local system accounts.
Adversaries may attempt to get a listing of domain accounts.
Adversaries may attempt to get a listing of cloud accounts.
Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment.
Adversaries may use an internal proxy to direct command and control traffic between two or more systems in a compromised environment.