Retrieve unsecured information in GPP
Tactic: Credential-access
Load and run and assembly to retrieve plaintext credentials and other sensitive account information pushed through
Group Policy Preferences.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Test this TTP using one of our Operator chainsPerform the initial discovery and credential access techniques used in Conti ransomware playbook.
Conti (Discovery)
2021-09-21
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github