Permission Groups Discovery T1069
Adversaries may attempt to discover group and permission settings. This information can help adversaries determine which user accounts and groups are available, the membership of users in particular groups, and which users and groups have elevated permissions. Adversaries may attempt to discover…
- Tactics
- Discovery
- Actors using it
- 22
- Sub-techniques
- 3
Ransomware groups reported using it
Threat actors
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Medusa Group52 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- ChimeraChina · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- FIN13Elephant Beetle · 42 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- ShinyHuntersUNC6240, Bling Libra · 39 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- LAPSUS$DEV-0537, Strawberry Tempest · 32 techniques
- HEXANELyceum, Siamesekitten, Spirlin · 29 techniques
- INC RansomGOLD IONIC · 25 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- ToddyCat24 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- Tonto TeamChina · Earth Akhlut, BRONZE HUNTLEY, CactusPete · 14 techniques
- admin@338China · 12 techniques