Threat intelligence / Technique
Windows Admin Shares with Stolen Credentials
An adversary guesses or obtains (i.e. steals or purchases) legitimate Windows administrator credentials (e.g. userID/password) to access Windows Admin Shares on a local machine or within a Windows domain.
Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17
Confidence
—
An adversary guesses or obtains (i.e. steals or purchases) legitimate Windows administrator credentials (e.g. userID/password) to access Windows Admin Shares on a local machine or within a Windows domain.
Labels
8 recorded
Relationships
1 external