Account Use Policies
Mitigation · ATTACK:enterprise:M1036
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:M1036",
"title": "Account Use Policies",
"type": "Mitigation",
"source_url": "https://attack.mitre.org/mitigations/M1036",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "course-of-action--f9f9e6ef-bc0a-41ad-ba11-0924e5e84c4c",
"external_id": "M1036",
"domain": "enterprise",
"created": "2019-06-11T16:32:21.854Z",
"modified": "2026-05-12T15:12:00.731Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
]
}Explicit source assertions (12)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1648
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1790e922-4472-4509-8193-63ba613ce068
Google Workspace Apps Script Restrict OAuth Scopes · Microsoft Developer Support Power Apps Conditional AccessATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1550.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--41f072bf-ec21-4a83-bb25-6c84fce8ca5d
AWS Data PerimetersATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1684
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--495350f1-94f1-4a31-916f-3f449b4af12e
SE - Hackers Target Workday · SE SentinelOne 2ATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1110.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b7e0525-1ba7-4d55-89d1-07fc94193065
Microsoft Common Conditional Access Policies · Okta Block Anonymizing ServicesATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1697
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--715a2282-4496-44fc-94f4-1f2ab029047f
ATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1550
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--71f51186-1805-4108-bde1-5f999de8603d
ATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1110.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f2d973c-aa06-42a1-9490-1e799c0a5ee2
Microsoft Common Conditional Access Policies · Okta Block Anonymizing ServicesATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1621
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a09cb233-bdff-4d89-bcc3-7fb2108911d0
Microsoft Common Conditional Access PoliciesATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1078.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b93fd13f-b11b-4f4b-9d77-977e7af41d5c
Microsoft Common Conditional Access PoliciesATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1110
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1a6c86e-5d5d-4cf1-845e-1660d9c19baf
Microsoft Common Conditional Access Policies · Okta Block Anonymizing ServicesATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1110.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cff34686-cbdf-4e0b-8108-c2deaf8855a7
Microsoft Common Conditional Access Policies · Okta Block Anonymizing ServicesATTACK:enterprise:M1036 → mitigates → ATTACK:enterprise:T1078
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f2d01f19-b4e7-417a-a936-11af9386b867
Microsoft Common Conditional Access Policies