Hardentechnique

D3-CROCredential Rotation

Credential Rotation

Definition

Credential rotation is a security procedure in which authentication credentials, such as passwords, API keys, or certificates, are regularly changed or replaced to minimize the risk of unauthorized access.

Defends against20

TypeTargetConfidenceTier
SubTechniquePassword Sprayingt1110.003100%live
SubTechnique/etc/passwd and /etc/shadowt1003.008100%live
SubTechniquePassword Guessingt1110.001100%live
SubTechniqueToken Impersonation/Theftt1134.001100%live
TechniqueForge Web Credentialst1606100%live
SubTechniqueMake and Impersonate Tokent1134.003100%live
TechniqueSteal Application Access Tokent1528100%live
SubTechniqueWeb Cookiest1606.001100%live
TechniqueSteal or Forge Kerberos Ticketst1558100%live
SubTechniqueWeb Session Cookiet1550.004100%live
TechniqueUnsecured Credentialst1552100%live
SubTechniqueNTDSt1003.003100%live
SubTechniquePassword Crackingt1110.002100%live
SubTechniqueCached Domain Credentialst1003.005100%live
SubTechniqueAdditional Cloud Credentialst1098.001100%live
TechniqueSteal Web Session Cookiet1539100%live
SubTechniqueCreate Process with Tokent1134.002100%live
TechniqueSteal or Forge Authentication Certificatest1649100%live
SubTechniqueApplication Access Tokent1550.001100%live
SubTechniqueGolden Tickett1558.001100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Defence
Password Rotation
Defence
Certificate Rotation
Defence
Credential Revocation
Defence
Credential Scrubbing
Defence
Authentication Cache Invalidation
Defence
Credential Hardening
Sourced from MITRE D3FEND ontology. Curated by Adam Lundqvist, SQUR.