Cloud Accounts

ATT&CK T1078.004

Valid accounts in cloud environments may allow adversaries to perform actions to achieve Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Cloud accounts are those created and configured by an organization for use by users, remote support, services, or for administration of resources within a cloud service provider or SaaS application. Cloud Accounts can exist solely in the cloud; alternatively, they may be hybrid-joined between on-premises systems and the cloud through syncing or federation with other identity sources such as Windows Active Directory.(Citation: AWS Identi

Category: Technique, stealth, persistence, privilege-escalation, initial-access

MITRE ATT&CK: T1078.004

Reference: MITRE ATT&CK T1078.004