| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Enterprise | T1003 | .005 | OS Credential Dumping: Cached Domain Credentials |
Cachedump can extract cached password hashes from cache entry information.[1] |
| ID | Name | References |
|---|---|---|
| G0006 | APT1 |