r_m_cisco_tacacs_Data_Access.md

Vendor: Cisco

Product: TACACS

Use-Case: Data Access

Rules	Models	MITRE ATT&CK® TTPs	Event Types	Parsers
2	0	1	1	1

Event Type	Rules	Models
process-created	T1003 - OS Credential Dumping ↳ A-CP-Sensitive-Files: Copying sensitive files with credential data on this asset ↳ CP-Sensitive-Files: Copying sensitive files with credential data