vz-risk / veris

Vocabulary for Event Recording and Incident Sharing (VERIS)
http://verisframework.org
Other
565 stars 161 forks source link

What "credential sharing" means #392

Open gdbassett opened 3 years ago

gdbassett commented 3 years ago

"Credential sharing" can be interpreted as "multiple people sharing credentials" or "a single person sharing their credentials across multiple sites".

For clarification, when writing about veris, use "credential sharing" to mean "multiple people sharing credentials" and "credential reuse" to mean "a single person sharing their credentials across multiple sites".

Within VERIS, "action.hacking.variety.Use of stolen creds" could mean either credential reuse or credential sharing.