What MITRE ATLAS Use Alternate Authentication Material (AML.T0091) - Adversarial use of Use Alternate Authentication Material as adapted in MITRE ATT&CK T1550 requires
This node addresses MITRE ATLAS technique AML.T0091 (Use Alternate Authentication Material). Adversaries may use alternate authentication material, such as password hashes, Kerberos tickets, and application access tokens, in order to move laterally within an environment and bypass normal system access controls. AI services commonly use alternate authentication material as a primary means for users to make queries, making them vulnerable to this technique. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow. ATT&CK reference: T1550 provides authoritative mitigation guidance for this technique class.
Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:
Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml
SHA-256 integrity: 6cf74d5156aea77064402e8e75d95bd76dd42b1ae78802c822dd0063ade458a3
Primary Citations — 6 traced to source
- MITRE ATLAS - Use Alternate Authentication Material (AML.T0091), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0091, AML.T0091 technique entry, 2026
- EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-atlas-use-alternate-authentication-material.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-atlas-use-alternate-authentication-material.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-atlas-use-alternate-authentication-material
- Back to registry: Browse all 10,108 compliance nodes