Exploitation for Credential Access

Technique · ATTACK:enterprise:T1212

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:T1212",
  "title": "Exploitation for Credential Access",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1212",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36",
  "external_id": "T1212",
  "domain": "enterprise",
  "created": "2018-04-18T17:59:24.739Z",
  "modified": "2025-10-24T17:49:08.674Z",
  "version": "1.6",
  "aliases": [

  ],
  "tactics": [
    "credential-access"
  ],
  "source_references": [
    {
      "source_name": "Bugcrowd Replay Attack",
      "url": "https://www.bugcrowd.com/glossary/replay-attack/"
    },
    {
      "source_name": "Comparitech Replay Attack",
      "url": "https://www.comparitech.com/blog/information-security/what-is-a-replay-attack/"
    },
    {
      "source_name": "ADSecurity Detecting Forged Tickets",
      "url": "https://adsecurity.org/?p=1515"
    },
    {
      "source_name": "Storm-0558 techniques for unauthorized email access",
      "url": "https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/"
    },
    {
      "source_name": "Microsoft Midnight Blizzard Replay Attack",
      "url": "https://x.com/MsftSecIntel/status/1671579359994343425"
    },
    {
      "source_name": "Technet MS14-068",
      "url": "https://technet.microsoft.com/en-us/library/security/ms14-068.aspx"
    }
  ]
}

Explicit source assertions (7)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.