ATLASAML.T0091
ATLAS index
AML.T0091

Use Alternate Authentication Material

Adversaries may use alternate authentication material, such as password hashes, Kerberos tickets, and application access tokens, in order to move laterally within an environment and bypass normal system access controls. AI services commonly use alternate authentication material as a primary means for users to make quer

Framework
MITRE ATLAS
Maturity
Demonstrated
Platforms
Enterprise
Release
2026.05

Overview

Adversaries may use alternate authentication material, such as password hashes, Kerberos tickets, and application access tokens, in order to move laterally within an environment and bypass normal system access controls.

AI services commonly use alternate authentication material as a primary means for users to make queries, making them vulnerable to this technique.

Sources

  1. MITRE ATLAS AML.T0091: Use Alternate Authentication Material — MITRE