Source Profile

🔌 MITRE ATT&CK — Valid Accounts

Insider/abused-credential technique intel.
Insider Threat NONE json

Auth

NONE
free

Format

json

Disciplines

1
mapped

Domains

1
served

Endpoints

Homehttps://attack.mitre.org/techniques/T1078/
API / endpointhttps://raw.githubusercontent.com/mitre/cti/master/enterprise-attack/enterprise-attack.json
CategoryInsider Threat

📤 Collect this source

Key-free machine-readable feed — registrable in the collector.

Feed RegistryRun Auto-CollectImport manually

🧭 Intelligence Disciplines

CYBINT Cyber Intelligence →

🎯 Mission Domains

Insider Threat →

🎫 Data Points produced

person →

🔗 Related Sources

abuse.ch ThreatFox CFR Cyber Operations Tracker CISA Automated Indicator Sharing CISA ICS Advisories Citizen Lab MITRE ATT&CK for ICS MITRE ATT&CK Groups (STIX) SANS Internet Storm Center AlienVault OTX Pulses

⚡ AI Skills & Automation

🤖 Copilot brief⚡ AI SkillsResolveEnrichAuto-CollectHuntReportExport

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center