ATT&CK technique · T1078.001
Valid Accounts: Default Accounts
Initial AccessPersistencePrivilege EscalationStealth
Full description, procedures and detections on attack.mitre.org
Who uses it
ATT&CK groups and malware with this technique. Highlighted: in SecurityTabs news this month.
Controls that mitigate it (14)
NIST SP 800-53 rev5, grouped by family (CTID mapping).
AC · Access Control
CA · Security Assessment and Authorization
SA · System and Services Acquisition
- SA-10Developer Configuration Management
- SA-11Developer Testing and Evaluation
- SA-15Development Process, Standards, and Tools
- SA-16Developer-provided Training
- SA-17Developer Security and Privacy Architecture and Design
- SA-3System Development Life Cycle
- SA-4Acquisition Process
- SA-8Security and Privacy Engineering Principles
SC · System and Communications Protection
SI · System and Information Integrity
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial.