AML.T0055
Unsecured Credentials
Description
Adversaries may search compromised systems to find and obtain insecurely stored credentials. These credentials can be stored and/or misplaced in many locations on a system, including plaintext files (e.g. bash history), environment variables, operating system, or application-specific repositories (e.g. Credentials in Registry), or other specialized files/artifacts (e.g. private keys).
Honesty-tier rationale
Credential access is bound to real stores/environments (repos, memory, env vars); it cannot be honestly enacted without infrastructure.