Platforms / Security resources

MITRE ATT&CK

Enterprise v20 / 15 tactics / 227 techniques / 479 sub-techniques

TA0006 / Enterprise tactic

Credential Access

Official MITRE tactic

The adversary is trying to steal account names and passwords.

Credential Access consists of techniques for stealing credentials like account names and passwords. Techniques used to get credentials include keylogging or credential dumping. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals.

18 techniques

Source: MITRE ATT&CK Enterprise v20, retrieved 2026-10-31. MITRE ATT&CK is a registered trademark of The MITRE Corporation.