Compliance Node Overview
MITRE ATT&CK T1078.003 (Local Accounts) is an Enterprise Defense Evasion and Persistence and Privilege Escalation and Initial Access sub-technique of T1078 (Valid Accounts). Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Local accounts are those configured by an organization for use by users, remote support, services, or for administration on a single system or service. Local Accounts may also be abused to elevate privileges and harvest credentials through OS Credential Dumping. Affected platforms: Linux, macOS, Windows, Containers, Network. MITRE-documented mitigations include M1026 Privileged Account Management, M1032 Multi-factor Authentication, M1027 Password Policies, M1018 User Account Management. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-05, AC-06, CA-03, CA-07, CM-05, CM-06.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1078/003/
SHA-256 integrity: 2afe51a3918740f022c4fd696a682e616fede712ac308ff8b4a6fca9d6bb691b
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1078.003: Local Accounts (https://attack.mitre.org/techniques/T1078/003/)
- MITRE ATT&CK Tactic TA0005: Defense Evasion (https://attack.mitre.org/tactics/TA0005/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access