T1556: Modify Authentication Process

T1556: Modify Authentication Process

Adversaries may modify authentication mechanisms and processes to access user credentials or enable otherwise unwarranted access to accounts. The authentication process is handled by mechanisms, such as the Local Security Authentication Server (LSASS) process and the Security Accounts Manager (SA...

View on MITRE ATT&CK →

AWS CreateOpenIDConnectProvider

Registers an OIDC identity provider in IAM.

Cloud Service: AWS - IAM

Tactics:

Persistence Privilege Escalation Defense Impairment

Techniques:

T1556T1484.002

Tags:

AWS IAM

AWS CreateSAMLProvider

Registers SAML identity-provider metadata in IAM.

Cloud Service: AWS - IAM

Tactics:

Persistence Privilege Escalation Defense Impairment

Techniques:

T1556T1484.002

Tags:

AWS IAM