Device Registration
Adversaries may register a device to an adversary-controlled account. Devices may be registered in a multifactor authentication (MFA) system, which handles authentication to the network, or in a device management system, which handles device access and compliance. MFA systems, such as Duo or Okta, allow users to associate devices with their accounts in order to complete MFA requirements. An adversary that compromises a user’s credentials may enroll a new device in order to bypass initial MFA re...
BY SOURCE
PROCEDURES (11)
Auto-extracted: 3 detections for privilege
Auto-extracted: 2 detections for cloud
Auto-extracted: 2 detections for oauth
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for authentication monitoring
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for general monitoring
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for cloud monitoring