XDR: Credential Access

Threat actors need credentials to gain unauthorised access to systems, elevate privileges, and move laterally within the environment while appearing as legitimate users.

In this room, we will explore techniques attackers employ to acquire authentication credentials, including usernames, passwords, tokens, or keys, which provide access to systems, applications, or networks.

Learning Objectives

After completing this room, you will be able to understand the following:

• What are credential access tactics
• Discuss various attack techniques and how they can be mitigated
• Review incidents related to a malicious credential access on the Microsoft Defender XDR portal
• Explain how to mitigate and respond to a credential access using Microsoft Defender XDR

Prerequisites

It's recommended that you have completed the following rooms:

• The XDR Introduction room
• The MITRE room.