Manage default accounts on enterprise assets and software, such as root, administrator, and other pre-configured vendor accounts. Example implementations can include: disabling default accounts or making them unusable.
| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name | Notes |
|---|---|---|---|---|---|
| CIS-4.7 | Manage Default Accounts on Enterprise Assets and Software | mitigates | T1586.003 | Cloud Accounts |
Comments
Default accounts are defined as built-in or factory/provider-set accounts across systems, software, and devices. Managing, changing default passwords, disabling state accounts, or otherwise hardening them through additional mechanisms directly constrains an adversary's abuse of the valid account technique.
References
|
| CIS-4.7 | Manage Default Accounts on Enterprise Assets and Software | mitigates | T1078.003 | Local Accounts |
Comments
Default accounts are defined as built-in or factory/provider-set accounts across systems, software, and devices. Managing, changing default passwords, disabling state accounts, or otherwise hardening them through additional mechanisms directly constrains an adversary's abuse of the valid account technique.
References
|
| CIS-4.7 | Manage Default Accounts on Enterprise Assets and Software | mitigates | T1078.002 | Domain Accounts |
Comments
Default accounts are defined as built-in or factory/provider-set accounts across systems, software, and devices. Managing, changing default passwords, disabling state accounts, or otherwise hardening them through additional mechanisms directly constrains an adversary's abuse of the valid account technique.
References
|
| CIS-4.7 | Manage Default Accounts on Enterprise Assets and Software | mitigates | T1078.001 | Default Accounts |
Comments
Default accounts are defined as built-in or factory/provider-set accounts across systems, software, and devices. Managing, changing default passwords, disabling state accounts, or otherwise hardening them through additional mechanisms directly constrains an adversary's abuse of the valid account technique.
References
|
| CIS-4.7 | Manage Default Accounts on Enterprise Assets and Software | mitigates | T1078 | Valid Accounts |
Comments
Default accounts are defined as built-in or factory/provider-set accounts across systems, software, and devices. Managing, changing default passwords, disabling state accounts, or otherwise hardening them through additional mechanisms directly constrains an adversary's abuse of the valid account technique.
References
|