Attack scenario
Phishing and identity abuse
An adversary manipulates a user, obtains credentials, or abuses a trusted account to gain access to the environment.
Why this scenario matters
This view connects the attack path with preventive, detective, response, and recovery controls and helps identify gaps between technologies.
The scenario uses MITRE ATT&CK® as a reference model. It is an expert SecTec interpretation and does not imply endorsement by MITRE.
Relevant ATT&CK tactics
- Credential Access
- Execution
- Initial Access
- Persistence
- Privilege Escalation
- Reconnaissance
- Stealth
Relevant ATT&CK techniques
SecTec technologies and vendors
The following hierarchy is derived from the approved ATT&CK-to-technology and technology-to-vendor mappings.
Cloud Security
Endpoint Security
Network Security
Identity and Access Mgmt
- ABACTechnology
- IAM platformsTechnology
- Identity GovernanceTechnology
- Identity LifecycleTechnology
- IGATechnology
- JEATechnology
- JITTechnology
- MFATechnology
- PAMTechnology
- PBACTechnology
- PIMTechnology
- Proximity VerificationTechnology
- RBACTechnology
- ReBACTechnology
- Risk Based AuthenticationTechnology
- SCIMTechnology
- SSOTechnology