300-220 CBRTHD: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

Question

How does the MITRE ATT&CK framework classify the pass-the-hash technique?

Explanation

Pass the Hash is MITRE ATT&CK sub-technique T1550.002 under Use Alternate Authentication Material and is associated with the Lateral Movement tactic because stolen password hashes are used to authenticate to and access remote systems.

Learn more

MITRE ATT&CK: Use Alternate Authentication Material: Pass the Hash (T1550.002)

300-220 CBRTHD: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

AstroTutor

Notes

Readiness

QuestionQ36

Community Discussion