tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Credentials & User Impersonation

Capture Keystrokes

Records user keystrokes as they are entered, potentially capturing credentials or other information typed by the user.

EDR HooksRESTRICTED_ACCESS_BLUR_MARKER

Steps1

CategoryCredential Harvesting

Walkthrough

Step 1

RESTRICTED_ACCESS_BLUR_MARKER

RESTRICTED_ACCESS_BLUR_MARKER

Requirements: none specified (operational prerequisites may still apply)

Check before starting: RESTRICTED_ACCESS_BLUR_MARKER

Coverage Gap: No catalog tool command currently produces this step's declared outcomes.

Detection 01

RESTRICTED_ACCESS_BLUR_MARKER

Mitigation 01

RESTRICTED_ACCESS_BLUR_MARKER

RESTRICTED_ACCESS_BLUR_MARKER

RESTRICTED_ACCESS_BLUR_MARKER