AWS GetPasswordData
Retrieves encrypted Windows administrator password data for an EC2 instance.
T1552: Unsecured Credentials
T1552: Unsecured Credentials
Adversaries may search compromised systems to find and obtain insecurely stored credentials. These credentials can be stored and/or misplaced in many locations on a system, including plaintext files (e.g. [Shell History](https://attack.mitre.org/techniques/T1552/003)), operating system or applica...
View on MITRE ATT&CK →Azure Microsoft.AppConfiguration/configurationStores/listKeys/action
Retrieves access keys for an Azure App Configuration store.
Azure Microsoft.Batch/batchAccounts/listKeys/action
Retrieves shared keys for an Azure Batch account.
Azure Microsoft.ContainerRegistry/registries/listCredentials/action
Retrieves the shared admin credentials of an Azure Container Registry.
Azure Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action
Requests local cluster-admin kubeconfig credentials for an AKS cluster.
Azure Microsoft.ContainerService/managedClusters/listClusterUserCredential/action
Retrieves the clusterUser kubeconfig for an AKS cluster.
Azure Microsoft.OperationalInsights/workspaces/sharedKeys/action
Retrieves primary and secondary shared keys for a Log Analytics workspace.
Azure Microsoft.ServiceBus/namespaces/authorizationRules/listKeys/action
Retrieves shared keys and connection strings for a Service Bus namespace authorization rule.
Azure Microsoft.Storage/storageAccounts/listKeys/action
Retrieves an Azure Storage account’s shared access keys.
Azure Microsoft.Storage/storageAccounts/regenerateKey/action
Regenerates a selected Azure Storage account access key.
Azure Microsoft.Web/sites/host/listKeys/action
Retrieves Azure Functions host, master, and system keys.