ttp

rid-hijack

RID Hijacking: A Stealthy Privilege Escalation Technique Exploited by Andariel Group

RID (Relative Identifier) hijacking is a sophisticated post-exploitation technique used by attackers to escalate privileges on compromised Windows systems.

apt

Emerging Trends in Adversary Techniques and Tools for Interactive Intrusions

Adversaries are increasingly targeting identities, leveraging compromised credentials and cloud account misuse to gain unauthorized access..