D3-CR

Credential Rotation

Rotate compromised or potentially compromised credentials to deny adversary access.

D3FEND / Evict

Implementation

  • Establish credential rotation procedures
  • Automate rotation for service accounts
  • Implement just-in-time access
  • Track credential age and usage
  • Force rotation after incidents

Tools

  • CyberArk
  • HashiCorp Vault
  • Azure AD
  • AWS Secrets Manager
  • Thycotic

ATT&CK mappings

3

MITRE D3FEND ↗