MITRE ATT&CK technique
T1003
OS Credential Dumping
Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password. Credentials can be obtained from OS caches, memory, or structures.(Citation: Brining MimiKatz to Unix) Credentials can then be used to perform [Lateral Movement](https://attack.mitre.org/tactics/TA0008) and access restricted information. Several of the tools mentioned in associated sub-techniques may be used by both adversaries and professional security testers. Additional custom tools likely exist as well.
TA0006
Linked Daily items
0 hits
No Daily items mapped yet.
Linked Incidents
0 hits
No incidents mapped yet.
Predicted CVE associations
0 items
No mappings yet for this technique.
These relationships come from the current triage artifact and are not official MITRE mappings.