Skip to content

Application Developer Guidance

Mitigation · ATTACK:enterprise:M1013

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:M1013",
  "title": "Application Developer Guidance",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1013",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--25dc1ce8-eb55-4333-ae30-a7cb4f5894a1",
  "external_id": "M1013",
  "domain": "enterprise",
  "created": "2017-10-25T14:48:53.732Z",
  "modified": "2024-12-10T16:07:50.023Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (17)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1496.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1bdf5794-9f6f-4d9a-9afd-542cefa858d0

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1647

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3c5b3ca4-af5a-47dd-8dd4-57d2a690c2a9

Apple Developer Doco Hardened Runtime

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1195

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3c740c2b-293a-4f6b-98a8-dde4a215eea1

Cider Security Top 10 CICD Security Risks

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1574

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4f806196-7c20-4923-ae01-8f0f7f27a4a7

FireEye DLL Side-Loading

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1564

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--508cef53-f7ff-4e64-9ab3-dedefbba697b

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1212

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6de628ac-2f5b-4563-8f54-c5243109221e

Bugcrowd Replay Attack · Comparitech Replay Attack

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1564.012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7acdcde3-1065-4393-ae6b-80ac95b2607d

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1550.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9c41ad44-8a0f-40bc-b832-ad7aa99e5290

Microsoft Token Protection 2023 · Okta DPoP 2023

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1559.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9e753c36-66d8-4f48-8b06-fbb9fdc92f76

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1550

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a53e9789-54e4-486c-8856-3281c9ef1a23

Microsoft Token Protection 2023 · Okta DPoP 2023

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1593.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--aae309ee-9d15-4188-8f74-68c581a3a720

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1078

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c8acdf40-8237-487f-8255-91afa327705d

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1564.009

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--da7b2203-dade-4ec0-85a5-dada9409ae2f

Apple App Security Overview

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1574.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e575c5f9-c9ff-4b84-920a-c483d9442c3a

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1195.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ef48b966-327f-4795-a1d0-4baf949fad2f

Cider Security Top 10 CICD Security Risks · Unit 42 Palo Alto GitHub Actions Supply Chain Attack 2025

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1593

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f0c57085-ccd9-48d1-b35d-1b0f1ba80e96

ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1559

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f60e5a0d-cfdf-4c4e-be35-af5a2bdbc131

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.