T1098.001 Account Manipulation

Named by 2 kept items in this workspace.

Search every workspace for T1098.001 Account Manipulation. It matches the name as written, so it can find other things that share it.

The items that name it 2

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
writeup2026-10-21It is written here as T1098.001 Account Manipulation: Additional Cloud Credentials: adding or modifying application credentials.
ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks
writeup2026-10-16It is written here as T1098.001 Account Manipulation: Additional Cloud Credentials - client secrets (expiring in 2028) added to two other applications; a certificate addition failed with a thumbprint mismatch.
expiring in 2028

All techniques in this workspace.