Skip to content

Restrict Web-Based Content

Mitigation · ATTACK:enterprise:M1021

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:M1021",
  "title": "Restrict Web-Based Content",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1021",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--21da4fd4-27ad-4e9c-b93d-0b9b14d02c96",
  "external_id": "M1021",
  "domain": "enterprise",
  "created": "2019-06-06T20:52:59.206Z",
  "modified": "2024-12-24T13:40:41.043Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (31)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1659

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0005fb3b-274a-4ac1-8fb2-51366fcd1a6b

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1102.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0d57e872-1062-4bab-b3c5-3cea17cba4dc

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1566.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--239092bc-09e4-4c16-9d83-071929c9e4a4

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1528

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--25407fd4-3940-4446-9c17-6eebe902dbdf

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1539

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--44c91929-3473-443c-91be-5afa81582dfa

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1218.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--51c6ea7a-8978-4bd5-9cc1-7d80bb16e70b

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1568

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5632a2de-e231-4ef0-971b-6cdb2750d410

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1102.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5e165901-44c0-423e-972b-d626b0c7cebf

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1204

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--66551074-a1e3-439c-a996-c1f7ca8136e2

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1133

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7302a389-7e1e-43b6-8b04-88ab89f17470

Defending Against Malicious Cyber Activity Originating from Tor

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1189

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7d8a729c-3656-4b31-85c0-42b75001f913

push notifications -infosecinstitute · mac security virus popup · site notifications - krebsonsecurity

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1566.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7f18d24e-fffe-413f-96ff-612b3e9bedd6

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1567

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--888cad71-2275-4ca6-a154-f297f972487c

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1568.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--909147b8-d0f8-4222-b62c-10f1d8bec2ec

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1550.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--90d8b716-a9b3-483a-b16b-fac062cbc6b0

Microsoft Azure AD Admin Consent

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1102

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--970635e8-9767-4654-b6ff-e1cd12bc206e

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1566

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a205b0ce-df00-40ae-b626-7dc3e8146d45

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1204.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a46e37b7-adfe-410c-a820-9d4c4037734d

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a6360da7-8678-4d7c-a866-6f2a982a23ba

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1102.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b174970c-561c-4f92-9262-512d4de40e5e

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1127

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2d73149-8bc7-45c4-baa3-66f5aa55b49d

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1059.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b432bca9-8f75-431d-b0af-f43623e287d4

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c375648a-e0ce-49f1-8428-d498444e0e64

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1567.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cf16ba1d-ea81-4301-a1a4-083e4a8927fe

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d4dbffc2-246d-4fd4-8c3c-0e7901aaef05

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1218

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--da5a2ac1-5e59-42ef-98c4-0d24597a32fb

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1567.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dc577c9d-db95-4dcb-ad15-5bb980f3aefb

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1127.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--de878489-591e-4b20-af92-43b737077b1d

NetSPI ClickOnce

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1567.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--df392629-4630-44a8-92a2-418b414a793b

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1204.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e37c2e11-8b96-4a9a-bc94-2995f54135dd

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f2f68eb7-4110-4750-9d1c-58774036672b

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.