{
  "technique_id": "T1539",
  "name": "Steal Web Session Cookie",
  "tactics": [
    "Credential Access"
  ],
  "platforms": [
    "Linux",
    "macOS",
    "Office Suite",
    "SaaS",
    "Windows"
  ],
  "summary": "An adversary may steal web application or service session cookies and use them to gain access to web applications or Internet services as an authenticated user without needing credentials. Web applications and services often use session cookies as an authentication token after a user has authenticated to a website. Cookies are often valid for an extended period of time, even if the web application is not actively used...",
  "generated_by": "SOC Response Atlas by Basyrix"
}