Dark Mode
Capec-575 Detail
Account Footprinting
Standard Software Likelihood: Low Typical Severity: Low
Parents: 169
Threats: T60 T65 T80 T258 T288 T291 T302 T334 T392 T407
An adversary exploits functionality meant to identify information about the domain accounts and their permissions on the target system to an authorized user. By knowing what accounts are registered on the target system, the adversary can inform further and more targeted malicious behavior. Example Windows commands which can acquire this information are: "net user" and "dsquery".
Not present
| External ID | Source | Link | Description |
|---|---|---|---|
| CAPEC-575 | capec | https://capec.mitre.org/data/definitions/575.html | |
| CWE-200 | cwe | http://cwe.mitre.org/data/definitions/200.html | |
| T1087 | ATTACK | https://attack.mitre.org/wiki/Technique/T1087 | Account Discovery |
Not present
- The adversary must have gained access to the target system via physical or logical means in order to carry out this attack.
Not present
Not present
| Authorization | Access Control | Confidentiality |
|---|---|---|
| Bypass Protection Mechanism | Bypass Protection Mechanism | Other |
| Hide Activities | Hide Activities | Bypass Protection Mechanism |
| Hide Activities |
Not present