Home/ MITRE Matrix/ Credential Access/ T1552.006

T1552.006Group Policy Preferences

T1552.006 — Group Policy Preferences is a MITRE ATT&CK technique in the Credential Access tactic. Clankerusecase tracks 3 detection use cases covering it and 1 threat-intel article citing it.

Credential Access

View on the matrix → Filter Detection Library MITRE official spec ↗

3Use cases

1Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1552 · Unsecured Credentials

Use cases covering this technique (3)

Windows Findstr GPP Discovery ESCU actions · alerting P Windows PowerSploit GPP Discovery ESCU actions · alerting P [LLM] GitHub Actions runner — process reads runner worker memory to extract GITHUB_TOKEN Bespoke actions · hunting DSΣPDDCS

Articles citing this technique (1)

high 10,000 Open-Source Projects Now Secured by Harden-Runner Community-Tier: A Milestone Three Years in the Making art-536