Steal or Forge Authentication Certificates T1649
Adversaries may steal or forge certificates used for authentication to access remote systems or resources. Digital certificates are often used to sign and encrypt messages and/or files. Certificates are also used as authentication material. For example, Entra ID device certificates and Active…
- Tactics
- Credential Access
- Actors using it
- 2
- Sub-techniques
- 0