System

Unix shadow File

Unix shadow files contain local account password hashes and password aging metadata.

Metadata

  • id: system.shadow-file
  • category: system
  • sensitivity: critical
  • artifact types: credential, password-store
  • tags: unix, accounts, password-hash

Path Matchers

PathKindPlatforms
/etc/shadowfilelinux

Credential Types

  • password-hash

Impact

  • credential_access
  • privilege_escalation

References

On this page