T1110.001_password-guessing
Adversaries with no prior knowledge of legitimate credentials within the system or environment may guess passwords to attempt access to accounts.
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Adversaries with no prior knowledge of legitimate credentials within the system or environment may guess passwords to attempt access to accounts.
Adversaries may use password cracking to attempt to recover usable credentials, such as plaintext passwords, when credential material such as password hashes are obtained.
Adversaries may use a single or small list of commonly used passwords against many different accounts to attempt to acquire valid account credentials.
Adversaries may use credentials obtained from breach dumps of unrelated accounts to gain access to target accounts through credential overlap.
Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained.
Adversaries may target multi-factor authentication (MFA) mechanisms, (i.e., smart cards, token generators, etc.) to gain access to credentials that can be used to access systems, services, and netw...
Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation.
Adversaries may target user email on local systems to collect sensitive information.
Adversaries may target an Exchange server, Office 365, or Google Workspace to collect sensitive information.