TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Huntress

Protecting Against Session Hijacking & Credential Theft | Huntress

2024-08-21 · Read original ↗

ATT&CK techniques detected

3 predictions
T1078Valid Accounts
78%
“or vpns at the account, organization, or identity level. unwanted access escalations we ’ ve also introduced escalations as part of unwanted access. escalations help our soc gather more information when investigating unwanted access login activity. these are not active incidents.…”
T1078Valid Accounts
68%
“identity threat detection and response ( itdr ) team has introduced unwanted access, a new capability focused on wrecking hackers by shutting down the primary ways they take over accounts : session hijacking and credential theft. we ’ ve taken our partners ’ input to heart in dev…”
T1133External Remote Services
35%
“you know that you never anticipate login activity from, say, egypt, you can create an expected rule for the united states and an unauthorized rule for egypt. once these rules are created, all login activity from the united states would be deemed “ known, ” and any login activity …”

Summary

Discover how our new Unwanted Access capability strengthens your defenses against session hijacking and credential theft. Dive in and learn how to minimize risks and protect your business-critical assets from evolving cyber threats.