Use Case: Abnormal Authentication & Access
May 13, 2026 · View on GitHub
Use Case: Abnormal Authentication & Access
Vendor: 1password
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| 1password | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: AIM Security
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| AI Security | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: APC
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| APC | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
Vendor: Abnormal Security
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Abnormal Security | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Absolute
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Absolute DDS | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Accellion
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Kiteworks | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Adaxes
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Adaxes | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Admin By Request
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Admin By Request | T1078 - Valid Accounts |
|
Vendor: Adobe
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Adobe Experience Manager | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Airlock
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Airlock Allowlisting | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Akamai
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Akamai Guardicore | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Akamai SIEM | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Cloud Akamai | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Amazon
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| AWS Bastion | T1078 - Valid Accounts T1110 - Brute Force |
|
| AWS CloudTrail | T1078 - Valid Accounts T1133 - External Remote Services |
|
| AWS CloudWatch | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| AWS Elastic Load Balancer | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| AWS WAF | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Amazon EKS | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Amazon Q | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Amazon S3 | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Apache
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Apache | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Apache Guacamole | T1133 - External Remote Services |
|
| Apache Subversion | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Apple
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| macOS | T1078 - Valid Accounts T1078.003 - Valid Accounts: Local Accounts |
|
Vendor: Arctic Wolf
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Cylance PROTECT | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: AssetView
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| AssetView | T1078 - Valid Accounts |
|
Vendor: Atlassian
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Atlassian | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Atlassian BitBucket | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Auth0
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Auth0 | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Avaya
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Avaya Ethernet Routing Switch | T1133 - External Remote Services |
|
Vendor: Badge
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Badge | T1078 - Valid Accounts |
|
Vendor: Barracuda
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Barracuda Cloudgen Firewall | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: BeyondTrust
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| BeyondInsight | T1078 - Valid Accounts T1133 - External Remote Services |
|
| BeyondTrust | T1078 - Valid Accounts T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| BeyondTrust Privileged Identity | T1078 - Valid Accounts T1133 - External Remote Services |
|
| BeyondTrust Remote Support | T1078 - Valid Accounts T1133 - External Remote Services |
|
| BeyondTrust Secure Remote Access | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Bitglass
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Bitglass CASB | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: BlackBerry
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| BlackBerry Protect | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Box
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Box Cloud Content Management | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: CA Technologies
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| CA Privileged Access Manager Server Control | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: CDS
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| CDS | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Canon
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| imageRUNNER ADVANCE | T1078 - Valid Accounts T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: CatoNetworks
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Cato Cloud | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Check Point
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Check Point Endpoint Security | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Check Point Identity Awareness | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| Check Point NGFW | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Check Point Security Gateway | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| SmartDefense | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Checkmarx
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Checkmarx | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Cimcor
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| CimTrak | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Cisco
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Cisco Cloud Security | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Cisco Collaboration | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cisco Cyber Vision | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cisco Data Center | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cisco IOS | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Cisco ISE | T1021 - Remote Services T1078 - Valid Accounts |
|
| Cisco Identity Intelligence | T1078 - Valid Accounts |
|
| Cisco Identity and Access Management | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Cisco Network Infrastructure and Management | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Cisco Network Security | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Cisco Remote Access Security | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cisco Secure Endpoint | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cisco Secure Firewall Management Center | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cisco Web Security | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Duo Access | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Citrix
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Citrix Gateway | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Citrix Virtual Apps | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Claroty
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| CTD | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Click Studios
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Passwordstate | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Cloudflare
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Cloudflare Audit | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cloudflare Insights | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cloudflare WAF | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Cohesity
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Cohesity DataPlatform | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Commvault
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Commvault | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Corelight
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Corelight IDS | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Cribl
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Cribl | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: CrowdStrike
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Falcon | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Identity Threat Detection & Response | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
Vendor: CyberArk
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| CyberArk Privilege Access Manager | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Darktrace
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Darktrace | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: DataWatch Systems
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| DataWatch | T1078 - Valid Accounts |
|
Vendor: Delinea
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Centrify Audit and Monitoring Service | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Centrify Authentication Service | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Centrify Zero Trust Privilege Services | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Secret Server | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Dell
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| PowerProtect | T1078 - Valid Accounts T1133 - External Remote Services |
|
| PowerProtect Data Manager | T1078 - Valid Accounts T1133 - External Remote Services |
|
| PowerStore | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Sonicwall | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Digital Arts
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Digital Arts i-FILTER for Business | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Digital Guardian
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Digital Guardian Endpoint Protection | T1078 - Valid Accounts T1078.003 - Valid Accounts: Local Accounts |
|
| Digital Guardian Network DLP | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Dropbox
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Dropbox | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: ESET
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| ESET Endpoint Security | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Egnyte
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Egnyte | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Entrust
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Entrust Identity Enterprise | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Epic
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Epic SIEM | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Ermes
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Ermes Browser Security Platform | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Exabeam
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Search | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Extrahop
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Extrahop Reveal(x) | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Extreme Networks
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| EXOS | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Platform ONE | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Universal ZTNA | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Zebra WLAN Management | T1078 - Valid Accounts T1110 - Brute Force |
|
Vendor: F-Secure
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| F-Secure Policy Manager | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: F5
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| F5 Access Policy Manager | T1021 - Remote Services T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| F5 BIG-IP | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| F5 Distributed Cloud | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| F5 WebSafe | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: FTP
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| FTP | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: FireMon
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| FireMon | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Forcepoint
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Forcepoint Next-Gen Firewall | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Websense Security Gateway | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Forescout
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Forescout CounterACT | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Fortinet
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| FortiAuthenticator | T1078 - Valid Accounts T1133 - External Remote Services |
|
| FortiClient | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| FortiGate | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| FortiNAC | T1078 - Valid Accounts T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| FortiSIEM | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Fortinet Enterprise Firewall | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Fortinet UTM | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Fortinet VPN | T1133 - External Remote Services |
|
| Fortiweb Web Application Firewall | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: FreeBSD
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| FreeBSD | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Gallagher
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Gallagher Access Control | T1078 - Valid Accounts |
|
Vendor: GitHub
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| GitHub | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: GitLab
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| GitLab | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: GoAnywhere
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| GoAnywhere MFT | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
Vendor: Google
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| GCP CloudAudit | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Gemini Enterprise | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Google Cloud Platform | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Google Workspace | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: HP
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Aruba ClearPass Policy Manager | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| Aruba Mobility Master | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| Aruba Wireless controller | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| ArubaOS | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| HP LaserJet Printer | T1078 - Valid Accounts |
|
| HP Print Server | T1078 - Valid Accounts |
|
| HP iLO | T1078 - Valid Accounts T1133 - External Remote Services |
|
| HPE 3PAR StoreServ | T1078 - Valid Accounts T1133 - External Remote Services |
|
| NonStop | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: HUMAN Security
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| HUMAN Bot Defender | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Halcyon
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Halcyon | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: HelpSystems
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Powertech Identity and Access Manager | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
Vendor: Huawei
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Huawei Unified Security Gateway | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: IBM
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| IBM | T1078 - Valid Accounts T1133 - External Remote Services |
|
| IBM Datapower | T1078 - Valid Accounts T1133 - External Remote Services |
|
| IBM Mainframe | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Security Access Manager | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Sterling B2B Integrator | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Illumio
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Illumio Core | T1133 - External Remote Services |
|
Vendor: Imperva
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Imperva Incapsula | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Imperva SecureSphere | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Imprivata
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Imprivata | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Infoblox
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| BloxOne DDI | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Infoblox NetMRI | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Informatica
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Informatica Cloud | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Int64 Software
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| OVERLAPS | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Ipswitch
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| MoveIt Transfer | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Ironscales
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Ironscales | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Island
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Island Enterprise Browser | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Ivanti
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Ivanti Pulse Secure | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Jamf
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Jamf Protect | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Johnson Controls
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Johnson Controls P2000 | T1078 - Valid Accounts |
|
Vendor: Jumpcloud
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Jumpcloud | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Juniper Networks
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Juniper SRX Series | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Junos OS | T1133 - External Remote Services |
|
Vendor: Kasada
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Kasada | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Kaspersky
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Kaspersky Endpoint Security for Business | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Kemp
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Kemp LoadMaster | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: KnowBe4
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Security Awareness Training | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Kong
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Kong Gateway | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: LanScope
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| LanScope Cat | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts |
|
Vendor: LastPass
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| LastPass | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Lenel
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| OnGuard | T1078 - Valid Accounts |
|
Vendor: LiquidFiles
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| LiquidFiles | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: LogRhythm
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| LogRhythm | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: ManageEngine
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| ADAuditPlus | T1078 - Valid Accounts T1133 - External Remote Services |
|
| ADManager Plus | T1078 - Valid Accounts T1133 - External Remote Services |
|
| ADSSP | T1078 - Valid Accounts T1133 - External Remote Services |
|
| PAM360 | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
Vendor: McAfee
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| McAfee Web Gateway | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Menlo Security
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Menlo Security | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Microsoft
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Active Directory Federation Services | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1110 - Brute Force T1133 - External Remote Services |
|
| Azure | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Azure AD Activity Logs | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Azure AD Sign-In Logs | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Azure Container Registry | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Azure DevOps | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Azure Key Vault | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Azure Kubernetes Service | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Azure MFA | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Azure Monitor | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Copilot | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - ADFS | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - ADWS | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - Application | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Event Viewer - Applocker | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - AzureADPasswordProtection-DCAgent | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - AzureADPasswordProtection-ProxyService | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - BFE Resorce Flows | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - BITS-Client | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - CAPI2 | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - CodeIntegrity | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - DFS-Replication | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - DNSServer | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - Directory-Service | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - File Replication Service | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - FileShareShadowCopyProvider | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - Kerberos-Key-Distribution-Center | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - Kernel-IO | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - Kernel-PnP | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - KnownFolders | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - LSA | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - Licensing-Platform | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - LiveId | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - NPS | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - NTLM | T1078 - Valid Accounts T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Event Viewer - NetworkProfile | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - OpenSSH | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Event Viewer - PowerShell | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - PrintService | T1078 - Valid Accounts |
|
| Event Viewer - RemoteDesktopServices | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - SMB | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - Security | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Event Viewer - Setup | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - System | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - TaskScheduler | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - TerminalServices | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - TerminalServices-Gateway | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Event Viewer - TerminalServices-RemoteConnectionManager | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Event Viewer - WinNat | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - WinRM | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Event Viewer - Windows Firewall | T1078 - Valid Accounts T1133 - External Remote Services |
|
| M365 Audit Logs | T1078 - Valid Accounts T1133 - External Remote Services |
|
| MSSQL | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft 365 | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft Advanced Threat Analytics | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft CAS | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft DHCP Log | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft Defender | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Microsoft Defender for Cloud | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft Exchange | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft IIS | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Microsoft Intune | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft Network Policy Server | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft RRAS | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft Sentinel | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Microsoft WMI Log | T1078 - Valid Accounts T1133 - External Remote Services |
|
| NetLogon | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Sysmon | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Windows | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Windows Defender Application Control | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Windows Device registration service | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Mimecast
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Code42 Incydr | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Mimecast Secure Email Gateway | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Mimecast Targeted Threat Protection - URL | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Monday.com
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Monday.com | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Mvision
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Mvision | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Nasuni
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Nasuni | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: NetApp
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| NetApp Ontap | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: NetMotion Wireless
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| NetMotion Wireless | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Netskope
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Netskope CASB | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Netskope Security Cloud | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Netskope Webtx | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Netwrix
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Netwrix Auditor | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: NextDLP
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Reveal | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
Vendor: Okta
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Okta Adaptive MFA | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: OneLogin
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| OneLogin | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: OneSpan
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Digipass for Apps | T1021 - Remote Services T1078 - Valid Accounts |
|
Vendor: OneWelcome
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| OneWelcome Cloud Identity Platform | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Open Shift
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| OpenShift | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Open VPN
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Open VPN | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: OpenAI
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| ChatGPT | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: OpenDJ
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| OpenDJ | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: OpenLDAP
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| OpenLDAP | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Oracle
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Oracle Cloud Infrastructure | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Oracle Database | T1133 - External Remote Services |
|
| Oracle Public Cloud | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Ordr
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Ordr SCE | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Osquery
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Osquery | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: PagerDuty
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| PagerDuty | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Palo Alto Networks
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Cortex XDR | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Cortex XSOAR | T1078 - Valid Accounts T1133 - External Remote Services |
|
| GlobalProtect | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
| Palo Alto Aperture | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Palo Alto NGFW | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Prisma Access | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Prisma Cloud | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Password Manager Pro
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Password Manager Pro | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Perforce
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Perforce | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Picture Perfect
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Picture Perfect | T1078 - Valid Accounts |
|
Vendor: Ping Identity
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| ForgeRock | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Ping Access | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Ping Identity | T1078 - Valid Accounts T1133 - External Remote Services |
|
| PingFederate | T1078 - Valid Accounts T1133 - External Remote Services |
|
| PingOne | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Portkey
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Portkey | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Portnox
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Portnox Cloud | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: PowerSentry
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| PowerSentry | T1133 - External Remote Services |
|
Vendor: Progress
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Progress ShareFile | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Proofpoint
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| ObserveIT | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Proofpoint Enterprise Protection | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Qualys
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Qualys AssetView | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Quest Software
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Quest Change Auditor for Active Directory | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: RS2 Technologies
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| RS2 Technologies | T1078 - Valid Accounts |
|
Vendor: RSA
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| RSA Authentication Manager | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| SecurID | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Radware
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Alteon | T1133 - External Remote Services |
|
Vendor: Rubrik
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Rubrik Cloud Data Management | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: SAP
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SAP | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: SIGSCI
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SIGSCI | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Sailpoint
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| IdentityNow | T1078 - Valid Accounts T1133 - External Remote Services |
|
| SecurityIQ | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Salesforce
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Salesforce | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Sangfor
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Sangfor NGAF | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: Saviynt
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Saviynt | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Secomea
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Secomea | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: SecurEnvoy
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SecurEnvoy Multi-Factor Authentication | T1133 - External Remote Services |
|
Vendor: SecureAuth
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SecureAuth IDP | T1078 - Valid Accounts T1133 - External Remote Services |
|
| SecureAuth Login | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: SecureLink
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SecureLink | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: SecureNet
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SecureNet | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Semperis
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Semperis DSP | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: SentinelOne
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Singularity Platform | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Vigilance | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: ServiceNow
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| ServiceNow | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Shibboleth
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Shibboleth | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Siemens
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Siemens Access Control | T1078 - Valid Accounts |
|
Vendor: Silverfort
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Silverfort Authentication Platform | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: SiteMinder
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Symantec SiteMinder | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: SkySea
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SkySea ClientView | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Skyformation
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Skyformation | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Skyhigh Security
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Secure Web Gateway | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Skyhigh CASB | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Skyhigh Security Cloud | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Slack
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Slack | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: SmartSuite
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SmartSuite | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Sophos
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Sophos Endpoint Protection | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts |
|
| Sophos UTM | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Sophos XG Firewall | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Sophos XGS Firewall | T1021 - Remote Services T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Splunk
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Splunk ES | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Squid
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Squid | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: SunOne
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| SunOne | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Swift
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Swift | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Swimlane
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Swimlane Turbine | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Swivel
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Swivel | T1133 - External Remote Services |
|
Vendor: Symantec
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Symantec Advanced Threat Protection | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Symantec CloudSOC | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Symantec DLP | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Symantec Endpoint Protection | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Symantec VIP | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Symantec Web Security Service | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
Vendor: TXOne Networks
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| StellarOne | T1078 - Valid Accounts T1133 - External Remote Services |
|
| StellarProtect | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Tanium
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Tanium Cloud Platform | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Tanium Core Platform | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Tenable
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Tenable Cloud Security | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Tenable Vulnerability Management | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: ThoughtSpot
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| ThoughtSpot | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Trellix
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Trellix Endpoint Security | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| Trellix Network Security (NX) | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
Vendor: Trend Micro
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Deep Discovery Inspector | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Deep Security | T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Vision One | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Tyco
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| CCURE Building Management System | T1078 - Valid Accounts |
|
Vendor: Unix
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Auditbeat | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Unix | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Unix Auditd | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| Unix Named | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: VMware
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Carbon Black App Control | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Carbon Black CES | T1078 - Valid Accounts T1133 - External Remote Services |
|
| Carbon Black EDR | T1078 - Valid Accounts T1133 - External Remote Services |
|
| VMware AirWatch | T1078 - Valid Accounts T1133 - External Remote Services |
|
| VMware ESXi | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| VMware Horizon | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
| VMware Identity Manager | T1078 - Valid Accounts |
|
| VMware NSX | T1078 - Valid Accounts T1133 - External Remote Services |
|
| VMware View | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1133 - External Remote Services |
|
| vCenter | T1021 - Remote Services T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Vectra
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Vectra Cognito Detect | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Veeam
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Veeam | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Venafi
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| TLS Protect | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Visma
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Megaflex | T1078 - Valid Accounts |
|
Vendor: Vormetric
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Vormetric | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Wallix
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Wallix Bastion | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Watchguard
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Watchguard | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Wiz
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Wiz | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Workday
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Workday | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: XPS
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| XPS | T1078 - Valid Accounts |
|
Vendor: Zeek
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Zeek | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1078.002 - T1078.002 T1078.003 - Valid Accounts: Local Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor: Zero Networks
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Zero Networks | T1078 - Valid Accounts T1133 - External Remote Services |
|
Vendor: Zscaler
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Zscaler Breach Predictor | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
| Zscaler Internet Access | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1133 - External Remote Services |
|
| Zscaler Private Access | T1021 - Remote Services T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols T1078 - Valid Accounts T1110 - Brute Force T1133 - External Remote Services |
|
Vendor:
Vendor: iBoss
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| Iboss Cloud | T1071 - Application Layer Protocol T1071.001 - Application Layer Protocol: Web Protocols |
|
Vendor: xPLAN
| Product | MITRE ATT&CK® TTP | Content |
|---|---|---|
| xPLAN | T1078 - Valid Accounts |
|