skills.rest
RideMatch1
RideMatch1COMMUNITY
Explore all skills by this author →
GitHub

mitre-t1078-valid-accounts

Map MITRE ATT&CK T1078 sub-techniques to AEGIS credential-protection scanner coverage.

Updated Aug 27, 2026
Search Tags:#coverage#credential-protection#security-modeling#mitre#aegis#t1078#valid-accounts
One-click install
npx skills add https://github.com/RideMatch1/a.e.g.i.s --skill mitre-t1078-valid-accounts
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mitre-t1078-valid-accounts
Source: https://github.com/RideMatch1/a.e.g.i.s/tree/main/packages/skills/skills/mitre-mapped/aegis-native/t1078-valid-accounts
Command: npx skills add https://github.com/RideMatch1/a.e.g.i.s --skill mitre-t1078-valid-accounts

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a structured map detailing how AEGIS credential-protection scanners map to MITRE ATT&CK T1078 sub-techniques (Default, Domain, Local, Cloud) to assist incident response and coverage reporting.

Core Features & Use Cases

  • Coverage mapping across T1078 sub-techniques to AEGIS scanners (default, domain, local, cloud) for credential protection.
  • Guidance for building credential-coverage reports and responding to T1078 alerts.
  • Reference patterns showing which AEGIS scanners cover each T1078 sub-technique and how to extend coverage.

Quick Start

Run the AEGIS MITRE mapping workflow to generate the T1078 coverage report for your codebase.

Frequently Asked Questions about mitre-t1078-valid-accounts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map AEGIS credential scanners to MITRE T1078 sub-techniques?▼

You can map AEGIS credential scanners to MITRE T1078 sub-techniques by running the AEGIS mapping workflow, which generates a structured coverage report linking scanner capabilities to specific valid account techniques across your codebase.

Does this coverage mapping support cloud account threat hunting scenarios?▼

Yes, the coverage mapping supports cloud account threat hunting scenarios by defining a formal mapping dataset that links AEGIS scanner capabilities to T1078 cloud sub-techniques, alongside default, domain, and local account scenarios.

How do I generate a reproducible credential coverage report for T1078?▼

To generate a reproducible credential coverage report for T1078, run the AEGIS mapping workflow to output a formal mapping dataset linking scanner definitions to MITRE technique details, enabling consistent documentation for security teams.

What do I need to perform MITRE T1078 coverage analysis?▼

Performing MITRE T1078 coverage analysis requires access to AEGIS scanner definitions and MITRE technique details, allowing the mapping workflow to link credential-protection capabilities to specific valid account sub-techniques for accurate reporting.

Related Skills

Explore More Software Engineering Skills→
jassicsjassics
6

attack-lookup

Map observed behaviors to MITRE ATT&CK technique IDs and references.

Community
Intermediate
aviskaaraviskaar
6

security-operations

Establish and manage SOC capabilities with SIEM configuration and incident response.

Official
Advanced
jfrometajfrometa

red-team-tactics

Map adversary techniques to MITRE ATT&CK phases for red-team simulations.

Community
Basic
YukiIto1999YukiIto1999

analyzing-threat-actor-ttps-with-mitre-navigator

Map threat actor TTPs to MITRE ATT&CK Navigator and generate layer JSON files.

Community
Intermediate