---
title: Emulating Access Token - MITRE ATT&CK Training and Certifications
description: MITRE ATT&CK and Access Token Manipulation. FIN8. MITRE ATT&CK Defender
image: https://mad20.com/hubfs/Emulating%20Access%20Token.png
---

# ATT&CK® Emulating Access Token Manipulation

## A New Advanced Offering

This course analyzes real-world examples of adversaries performing Access Token Manipulation and discusses how we can emulate this behavior. The course is broken down into modules, with each module focusing on a specific sub-technique for Access Token Manipulation. The first module focuses on the token impersonation/theft sub-technique, and it dives into two real world examples from FIN8 and Shamoon.

### Target Audience

This course is meant for adversary emulators who want to learn more about access token manipulation.

 

### Course Prerequisites

Adversary Emulation Fundamentals Course Technical primer courses on Access Tokens and Access Token Manipulation.

![8-2](https://mad20.com/hs-fs/hubfs/8-2.png?width=622&height=350&name=8-2.png)

 

![Emulating Access Token](https://mad20.com/hs-fs/hubfs/Emulating%20Access%20Token.png?width=500&height=500&name=Emulating%20Access%20Token.png)