Skip to content
Physical Access & Control Taxonomy maintained by slashsec

Steal Endpoint Device

Details
ID P0027.001
Sub-technique of P0027
Tactics PT0010
Created 2026-06-22
Last Modified 2026-06-22
Contributors slashsec
Version Permalink Link

Description

Adversaries may take laptops, desktops, tablets, or other endpoint devices from workspaces, labs, or unsecured areas. Endpoint theft can expose local storage, cached credentials, and peripheral tokens left with the device.

Technique

Tactics