aol.pm

Privileged Account Management

Mitigation · ATTACK:enterprise:M1026

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:M1026",
  "title": "Privileged Account Management",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1026",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--9bb9e696-bff8-4ae1-9454-961fc7d91d5f",
  "external_id": "M1026",
  "domain": "enterprise",
  "created": "2019-06-06T21:09:47.115Z",
  "modified": "2024-12-18T18:44:23.306Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (115)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--00b0b6ec-a9eb-4fdd-b7ea-6e6c8a8ab1fc

TechNet Scheduling Priority

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1550.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0347a294-8928-4d15-8df2-44452b40afe4

ADSecurity AD Kerberos Attacks

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1555.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--04724f1d-f6ff-448e-bcac-4bcda34d895b

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1505.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--05ae3ecc-6920-4828-b708-f0acdf0e2ff3

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1556.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--062789ad-19d9-4c8c-82db-474d9f19c9c9

TechNet Credential Theft · TechNet Least Privilege · Microsoft Securing Privileged Access

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1555

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0a4819da-bba0-487b-abff-41d6fba75922

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1569.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--10625b4c-7ecc-49a0-b8e3-c9f2d8cba2da

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1505.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1422f68c-e962-4a13-8074-77f5b99b7718

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1e0c4d65-a4db-42e0-9eb0-93354ad56d06

FireEye WMI 2015

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1552.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--21454d73-1532-4656-9cd6-172f046613b3

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1098.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2606e684-b69d-47fc-822f-279d197a1e7a

Microsoft Requests for Azure AD Roles in Privileged Identity Management

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1222.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2a7a152f-79c9-45c9-9f09-0d39f563ad05

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1698

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2b8522af-942b-4781-aee5-3687786c7f49

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1556.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--327a2877-8820-4def-8cd8-787f06cfd987

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1021.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--335d97be-914a-4198-aa06-55095e850ffc

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1569

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3ab372ea-c8be-4fb1-a9d3-4aa542e1f10f

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1599

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--415fc129-cac9-4d8c-8285-8ea563489b03

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1003.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4274e62f-1dc9-47d0-800a-f812cfe4e071

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1072

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--43eebb80-4b8a-4690-a7e3-5f6f8e08db9f

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1543

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--44f0fc9b-82bf-4820-a4c4-8e96fc25107c

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1553.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--482ec859-f060-4131-a17f-5695587853e1

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1484

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--48357d6a-6d00-42a6-b687-cbd5a9a8ecd6

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1547.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4907e8fb-e224-49a6-aa94-5a76afa714ba

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1134.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--49aeba9e-9ae9-4eb2-873e-b8ab4f8ab347

Microsoft Create Token · Microsoft Replace Process Token · Microsoft runas

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1542.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--49f4c3d1-25a1-49e1-af9f-80a4c2eb4bf7

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1078.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4cdd118b-5ad8-4607-94b2-be828038b5ff

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1190

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4d50a045-d85d-481f-ac7d-672065f1e348

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1078.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4dbb52bd-9ecf-4c61-91b2-9787860f737c

TechNet Credential Theft · TechNet Least Privilege · Microsoft Azure security baseline for Azure Active Directory · Microsoft Security Alerts for Azure AD Roles

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1078.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4f8dca9b-86d0-4d97-98ed-c98240cc3933

Kubernetes Service Accounts · Microsoft Remote Use of Local · TechNet Credential Theft · TechNet Least Privilege

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1688

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--50484fcd-8b37-4a95-9705-49006ba0edd5

CyberArk Labs Safe Mode 2016

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1558.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--511f21a9-50eb-47ff-b714-90c485bca8d0

AdSecurity Cracking Kerberos Dec 2015

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1612

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--52ded6c4-f6f1-4c9a-8973-4378a91193d5

Kubernetes Hardening Guide

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1484.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--53b041d2-4250-473e-b7c6-3b05fcdf3d3f

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1098.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--53c22ca9-b02f-4a45-adc6-cf7763a2c6a9

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1059.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--58743d1b-6abb-43dd-8fcc-9da1082386e0

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1003.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5e3f6da4-a327-4c42-8a12-bc5840336430

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1222.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5e5ee6b9-182f-47fb-a0b5-71c3c52fed12

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1542.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6223d178-5cf3-4c84-84f1-583895468915

Cisco IOS Software Integrity Assurance - AAA · Cisco IOS Software Integrity Assurance - TACACS

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1134.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--62b22a20-4049-4f0d-b879-235e8ab96764

Microsoft Create Token · Microsoft Replace Process Token · Microsoft runas

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1606

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--673afcb8-2fb0-4c17-9f91-8fb409943531

FireEye ADFS

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1559.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--67a63d3a-30a5-43b6-a593-dc08581b460a

Microsoft Process Wide Com Keys · Microsoft System Wide Com Keys · Microsoft COM ACL

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1611

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--690a7276-e560-4d69-92bc-feecf7d0cc73

Kubernetes Hardening Guide

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1136.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6a11c7bd-61ef-4b08-bee5-856f3bd401d1

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1218

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6dc1f5ca-8881-4d06-b192-7bc502ea94ce

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1550

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--72904b3d-5b24-4698-8094-8919f3bda494

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1053.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--75a29a2d-548e-4aba-b33f-5322936b9e7a

Kubernetes Hardening Guide

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1553

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--764f3883-da8b-421d-96ed-e14878bcc72e

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1003.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--789a2c4e-9152-4b83-a275-58f6b5262a81

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1055

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--78af537b-48cc-411d-a209-3e01c44aa87b

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1548

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e024389-346c-489b-a406-1bbdec150eda

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1556.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7fc1c3bb-05f7-4593-b8c3-f9833c114672

TechNet Credential Theft · TechNet Least Privilege · Microsoft Securing Privileged Access

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1552.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--803c83dc-fe82-40e4-8aa7-35c95269ef8f

Kubernetes Service Accounts

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1078

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--89887815-acfc-42f9-9172-81437cf9ff69

TechNet Credential Theft · TechNet Least Privilege · Microsoft Securing Privileged Access

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1098.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8b4c2543-e2f1-4f7c-b687-d07e7a4c763c

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1525

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8dfdc783-d869-498b-b4e0-1d75b30e2d67

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1053

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8f09085f-c1cf-4321-89c4-17d93e774f6f

TechNet Scheduling Priority

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1548.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--922037af-61f0-42d8-8b57-310b6b56ea5a

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1021.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--935ca61c-b4ff-4cfc-a4e9-9b8aa9514ea3

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1548.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--96c55f98-c988-43ef-8946-e09c72280ae9

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1542.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--99662840-c630-4858-8d44-331d0b31fbc1

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1222

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9a8788d7-3f27-49b4-bb60-0b0d581fa812

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1699

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9d1e0e1e-7bfc-49e0-963d-72c35ba83591

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1609

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9dcf3707-34ff-4a44-b65b-fc1f8f127bf5

Kubernetes Admission Controllers · Kubernetes Hardening Guide

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1210

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9ff11dd9-23a1-46d9-913d-c580d45667f2

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1098

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9ffc8525-79a5-40a2-b371-46052daf66c5

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a266294c-18a7-4a6e-8291-a901748c929c

Microsoft Securing Privileged Access

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1546

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a3985a50-df7f-489f-a033-1a6b6e41382e

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1601.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a4c24712-a5cf-4c44-91cd-057dc0a85e0f

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1558.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a6e6f751-5c93-4a31-afdc-78513aaea15a

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1556.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a7c79cef-cd50-4106-a78d-fc56cb2da51a

MagicWeb

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1546.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a8e5b5ae-85ca-48da-b3a0-36da1162034d

FireEye WMI 2015

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1003.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--aa2cd10c-5062-4abb-a8ec-0e178a5440ec

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ad32e902-6f48-4c8f-bc3d-2fc06f045eed

Microsoft PS JEA · Netspi PowerShell Execution Policy Bypass

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1056.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--adffe817-2460-49c7-be30-44afea58d7f8

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1550.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b06103d8-d410-418e-851a-63ca820cc27e

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1601.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b099746f-3c9f-41e8-95b2-af6ee5c10e83

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1542

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2651406-190a-4341-8d76-f9c25f66077b

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1136

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b465fe54-83e6-4d1c-b752-d13bb788c3ac

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1495

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b4dafcd2-fed8-4266-b83e-f4033ada0d55

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1606.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b51d04ec-51da-4017-b806-210429592565

FireEye ADFS

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.