ATT&CK ReferencesCore Security Impacket

Core Security Impacket

Core Security. (n.d.). Impacket. Retrieved November 2, 2017.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1003.003 NTDS	GroupDragonfly	Dragonfly has dropped and executed SecretsDump to dump password hashes. They also obtained ntds.dit from domain controllers. Core Security Impacket US-CERT TA18-074A
T1003.004 LSA Secrets	GroupDragonfly	Dragonfly has dropped and executed SecretsDump to dump password hashes. Core Security Impacket US-CERT TA18-074A

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.