Domain or Tenant Policy Modification T1484
Adversaries may modify the configuration settings of a domain or identity tenant to evade defenses and/or escalate privileges in centrally managed environments. Such services provide a centralized means of managing identity resources such as devices and accounts, and often include configuration…
- Tactics
- Defense Impairment, Privilege Escalation
- Actors using it
- 6
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- Storm-050134 techniques
- Indrik SpiderRussia · Evil Corp, Manatee Tempest, DEV-0243 · 27 techniques
- Cinnamon TempestChina · DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT · 16 techniques