T1110
Brute Force
Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or password hashes are obtained.
ATT&CK / Credential Access
Defense strategies
- Account lockout policies
- Multi-factor authentication
- Strong password requirements
- Rate limiting
Detection methods
- Monitor failed login attempts
- Detect password spray patterns
- Track unusual authentication volume
D3FEND mappings
2