Bidda Sovereign Intelligence · 10,099 Verified Nodes · 39 Sovereign Pillars

MITRE ATLAS Establish Accounts (AML.T0021) - Adversarial use of Establish Accounts as adapted in MITRE ATT&CK T1585

This node addresses MITRE ATLAS technique AML.T0021 (Establish Accounts). Adversaries may create accounts with various services for use in targeting, to…

What MITRE ATLAS Establish Accounts (AML.T0021) - Adversarial use of Establish Accounts as adapted in MITRE ATT&CK T1585 requires

This node addresses MITRE ATLAS technique AML.T0021 (Establish Accounts). Adversaries may create accounts with various services for use in targeting, to gain access to resources needed in AI Attack Staging, or for victim impersonation. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow. ATT&CK reference: T1585 provides authoritative mitigation guidance for this technique class.

Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:

Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml

SHA-256 integrity: a0d3a4fd35ae8b68efe45af57d96abb25b4b9746e0b618ca40b09fe9f1d9e317

Primary Citations — 6 traced to source

  • MITRE ATLAS - Establish Accounts (AML.T0021), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0021, AML.T0021 technique entry, 2026
  • EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024

+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

⚠ Important: Human Verification Required

Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.