| ID | Name |
|---|---|
| ATAGS-T1113.001 | Cloud Secrets Management Stores |
| ATAGS-T1113.002 | Credentials from Web Browsers |
| ATAGS-T1113.003 | Keychain |
| ATAGS-T1113.004 | Password Managers |
| ATAGS-T1113.005 | Securityd Memory |
| ATAGS-T1113.006 | Windows Credential Manager |
Threat Actors may acquire credentials from cloud-native secret management solutions such as AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, and Terraform Vault.
This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.