aol.pm

Multi-factor Authentication

Mitigation · ATTACK:enterprise:M1032

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:M1032",
  "title": "Multi-factor Authentication",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1032",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--b045d015-6bed-4490-bd38-56b41ece59a0",
  "external_id": "M1032",
  "domain": "enterprise",
  "created": "2019-06-10T20:53:36.319Z",
  "modified": "2025-05-09T15:48:18.053Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (48)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1098.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--04f19ae7-931f-4798-a609-4b64aced1da3

Expel IO Evil in AWS

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1040

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0ccddf91-2cf3-4801-a10b-ca4d253f2c8c

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1136.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1e4070de-5bae-4900-a3a8-907190f34dd4

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1669

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1f110a49-63e2-4b73-b109-59694b419072

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1556.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--22501b39-e106-4a7f-b915-013c30f47af8

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1556

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2686dfb7-60ab-424c-add2-2f164a98cfa4

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1213

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2bd8bb5f-6210-4460-84c4-b7fab86e08a2

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1599

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3541e998-a3ac-42d7-8a66-f66da6f9162a

Cisco IOS Software Integrity Assurance - TACACS

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1114

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3709ccc2-2370-4dc9-92ac-792867bbdea4

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1621

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3a907723-bc0a-4a35-a9fc-dd45ad7752a8

MFA Fatigue Attacks - PortSwigger

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1078.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3e2212a9-9347-46ac-ae96-04e558973779

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1601

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--441e6528-4342-4387-848b-febb051e05f7

Cisco IOS Software Integrity Assurance - TACACS

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1078.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--45912a00-141c-45ec-afb6-2ac272764c14

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1136.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4e949816-0200-45ed-b0c6-27afce63fd17

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1136.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--509555cb-1a35-4e09-bc6e-a2c9c521f827

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1078.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--528d581d-aa34-4162-a773-6b329c3af4cb

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1098.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--56f2efc6-fb22-47f9-a86f-db5c69224936

CISA MFA PrintNightmare · Mandiant APT29 Microsoft 365 2022 · Microsoft - Device Registration

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1110.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--64201f56-d678-4ed2-b759-c78bf9e4d82a

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1078.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--68ad793a-2678-4537-8480-8086fd4d757e

AWS - IAM Console Best Practices

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1601.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6e32fdd0-c094-405e-8246-7502c9aedb68

Cisco IOS Software Integrity Assurance - TACACS

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1098

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--74e433ec-0c52-42f2-b0d4-3e1f3a56b419

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1556.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--77a73e89-d4b6-47c7-8676-8208c3797680

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1021.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--77c5bb7d-9584-4d57-850b-6349984181a8

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1539

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7a1cf82e-68e5-49ca-89ae-e492cd85dab4

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1599.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7b6a48c0-9bcc-47d2-976a-e7dbaa00f4bc

Cisco IOS Software Integrity Assurance - TACACS

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1098.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7dfb4403-9368-4fed-aac0-a968e7761c4a

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1110.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7fad18cd-28b4-47b4-8b38-f8beaf1120ad

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1114.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--854e11fd-f29e-4b7e-a3c2-f4c8c9ee302f

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1199

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--884c3843-5065-4919-ad6e-0f77130b4d36

Microsoft Nobelium Admin Privileges

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1021.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--96014091-aba9-4b8f-ac6a-6cdeb593cf30

Berkley Secure

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1078

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--98167cc6-96de-4f02-83b1-78d7633c4106

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1136

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a3012b2b-b19c-46fc-944c-d04d9c4b897b

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1556.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--acd4512e-3ef7-4c33-9fc1-c3829efebe60

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1485

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ad410271-db42-45b4-a5a5-6133bba495ce

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1098.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--af3fe271-9d63-447d-bd88-f5f0b41a43c2

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1021.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c4e70046-dbed-4e21-8a00-37bbb6de5bc4

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1072

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c869db21-9c91-4449-b316-408bcab56e1b

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1110

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cb87a0ce-0976-49e5-8e9c-2c908a24b30f

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1110.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ce2f8c4d-43f0-459e-a579-1faf28e4bca6

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1110.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dc1b1842-ce36-46ec-83d5-66292d65c463

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1021

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--df529a76-525d-4a35-a9d2-48ec41f71459

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1133

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e23d57b4-5bc4-4d06-9084-9c99464c4af8

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1098.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e65ad45a-4862-4455-8d3c-454eb78deaeb

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1556.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eb985609-6a5f-4e44-9bae-bfbc1e93d978

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1530

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ee3162ad-e88e-401c-9fdf-e7f0784141a4

Amazon S3 Security, 2019

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1601.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f1d0e2ed-3d68-4606-8a1c-3a78f9b55afe

Cisco IOS Software Integrity Assurance - TACACS

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1213.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f8878fab-91a9-49d2-b985-fefa10e22ade

ATTACK:enterprise:M1032 → mitigates → ATTACK:enterprise:T1556.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fa8d6c79-557f-44e1-a27b-55f87b2c8084

Cisco IOS Software Integrity Assurance - TACACS

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.