MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Credential Access/ T1003.006

T1003.006DCSync

T1003.006 — DCSync is a MITRE ATT&CK technique in the Credential Access tactic. Clankerusecase tracks 3 detection use cases covering it.

Credential Access

View on the matrix → Filter Detection Library MITRE official spec ↗

3Use cases

0Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1003 · OS Credential Dumping

Use cases covering this technique (3)

Windows AD Replication Request Initiated by User Account ESCU actions · alerting P Windows AD Replication Request Initiated from Unsanctioned Location ESCU actions · alerting P Windows AD Replication Service Traffic ESCU actions · alerting P