Modify Authentication Process (T1556)

Adversaries may modify authentication mechanisms and processes to access user credentials or enable otherwise unwarranted access to accounts.

Tactics
TA0003 TA0005 TA0006

Sub-techniques
T1556.001 T1556.002 T1556.003 T1556.004 T1556.005 T1556.006 T1556.007 T1556.008 T1556.009

See: MITRE ATT&CK