Default Credentials
Subtechnique · ATTACK:ics:T1694.001
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T1694.001",
"title": "Default Credentials",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1694/001",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--5658ad88-7510-490e-a351-95d50b1bcd91",
"external_id": "T1694.001",
"domain": "ics",
"created": "2026-04-20T20:54:19.020Z",
"modified": "2026-10-13T17:48:42.708Z",
"version": "1.0",
"aliases": [
],
"tactics": [
"persistence",
"lateral-movement"
],
"source_references": [
{
"source_name": "Keith Stouffer May 2015",
"url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r2.pdf"
}
]
}Explicit source assertions (7)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:M0927 → mitigates → ATTACK:ics:T1694.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--096e7743-c090-4386-a759-d749f00bae61
ATTACK:ics:M0801 → mitigates → ATTACK:ics:T1694.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--23f33619-c64e-4999-85c1-b5c88e570e46
ATTACK:ics:C0066 → uses → ATTACK:ics:T1694.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7050acd5-637b-4581-b58e-dcfac3eb1bb5
Tenable Minnesota Water UtilitiesATTACK:ics:G1027 → uses → ATTACK:ics:T1694.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--76c3caa4-bc2a-437d-9826-3d32a78ff76a
Dispel Iran Water Utilities · Tenable Minnesota Water UtilitiesATTACK:ics:C0031 → uses → ATTACK:ics:T1694.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aabf71ab-4121-4e3e-888d-cc16d2133846
CISA AA23-335A IRGC-Affiliated December 2023 · CISA Unitronics November 2023ATTACK:ics:C0063 → uses → ATTACK:ics:T1694.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b8e71df0-20c4-42b0-8d80-68e93fc084c2
CERT PolskaATTACK:ics:T1694.001 → subtechnique-of → ATTACK:ics:T1694
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cd1be463-233c-43c8-b03d-fa0d6bdd8427