ATT&CKcon 7.0 registration is open! Join us October 27-28, 2026 in McLean, VA or virtually. Register in person or register virtually. See the FAQ for hotel and venue details.
Detection of Insecure Credentials
Technique Detected: Insecure Credentials | T1694
ID: DET0905
Domains: ICS
Analytics: AN2048
Version: 1.0
Created: 22 April 2026
Last Modified: 31 July 2026
Analytics
AN2048
Monitor network traffic for insecure credential use in protocols that allow unencrypted authentication.
Monitor logon sessions for insecure credential use, when feasible.
Log Sources
| Data Component | Name | Channel |
|---|---|---|
| Network Traffic Content (DC0085) | Network Traffic | None |
| Logon Session Creation (DC0067) | Logon Session | None |
