{
  "technique_id": "T1187",
  "name": "Forced Authentication",
  "tactics": [
    "Credential Access"
  ],
  "platforms": [
    "Windows"
  ],
  "summary": "Adversaries may gather credential material by invoking or forcing a user to automatically provide authentication information through a mechanism in which they can intercept. The Server Message Block (SMB) protocol is commonly used in Windows networks for authentication and communication between systems for access to resources and file sharing...",
  "generated_by": "SOC Response Atlas by Basyrix"
}