T1201Discovery
Password Policy Discovery
Adversaries may attempt to access detailed information about the password policy used within an enterprise network or cloud environment. Password policies are a way to enforce complex passwords that are difficult to guess or crack through Brute Force. This information may help the adversary to create a list of common passwords and launch dictionary and/or brute force attacks which adheres to the…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
Detections
6 Sigma rules tagged T1201Password Policy DiscoveryT12016 general rules
- HackTool - CrackMapExec Executionhightest
- Password Policy Enumeratedmediumtest
- Password Policy Discovery - Linuxlowstable
- Cisco Discoverylowtest
- Net.EXE Executionlowtest
- Password Policy Discovery With Get-AdDefaultDomainPasswordPolicylowtest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Password Policy Discovery
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.