Skip to content

DET0756 Detection of Default Credentials

Item Value
ID DET0756
Version 1.0
Created 21 October 2025
Last Modified 21 October 2025

Technique Detected: T0812 (Default Credentials)

Analytics

ICS

AN1888

Monitor network traffic for default credential use in protocols that allow unencrypted authentication. Monitor logon sessions for default credential use.

Log Sources
Data Component Name Channel
Network Traffic Content (DC0085) Network Traffic None
Logon Session Creation (DC0067) Logon Session None
Mutable Elements
Field Description