ATT&CK 기법 · Persistence · Privilege Escalation
Account Manipulation T1098
이 기법을 다룬 REVELARE 한국어 위협 분석 1편 · Persistence · Privilege Escalation
이 기법을 다룬 분석
MITRE 공식 정의
Adversaries may manipulate accounts to maintain and/or elevate access to victim systems. Account manipulation may consist of any action that preserves or modifies adversary access to a compromised account, such as modifying credentials or permission groups.(Citation: FireEye SMOKEDHAM June 2021) These actions could also include account activity designed to subvert security policies, such as performing iterative password updates to bypass password duration policies and preserv…
플랫폼: Containers, ESXi, IaaS, Identity Provider, Linux, macOS, Network Devices, Office Suite, SaaS, Windows