Filter Network Traffic
Mitigation · ATTACK:enterprise:M1037
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:M1037",
"title": "Filter Network Traffic",
"type": "Mitigation",
"source_url": "https://attack.mitre.org/mitigations/M1037",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "course-of-action--20f6a9df-37c4-4e20-9e47-025983b1b39d",
"external_id": "M1037",
"domain": "enterprise",
"created": "2019-06-11T16:33:55.337Z",
"modified": "2026-05-12T15:12:00.730Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
]
}Explicit source assertions (52)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1205.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0058d5dd-bf42-4a09-94ff-dfb024b949df
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1557
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--029a477b-fa90-4941-a577-1af6900d1b56
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1696
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--04f6d882-3964-4d57-bc83-714b7cb4264d
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1572
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0927eb00-4a08-4ed1-8678-84d6e1e87b98
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1499.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--18aa9fc3-5269-4205-a58e-6aeb127c38f4
CERT-EU DDoS March 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1c0c0c90-7974-48f4-9de0-15a8d9b00e0a
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1557.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--265401e7-92fa-46ea-b5d3-e64c387f6a8d
ntlm_relaying_kerberos_delATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1498.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2f47b6cb-a378-492d-9565-e9ebbca68908
CERT-EU DDoS March 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1218
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3fdff7fb-837d-4e2f-acd2-c43c933d4322
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1071.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--444dc2e9-3f54-4ab9-b004-363ae1221373
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1090.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4735a1be-c556-4844-9554-d2313376f09a
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1197
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b4d8f9e-a416-4af6-9c20-582892601668
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1205
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b5e8e16-ddf4-4339-859b-f70f980d612b
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1048.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4c8d1c47-d1a1-4117-8ba5-39296d8afe4d
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1071.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4e7668ba-bde1-412c-b22d-65b57baabd0d
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1021.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4f05951e-e480-4ffc-b573-3a7aa3fc4b7c
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1498
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--52fcde3f-d3af-4785-940f-5856dd657455
CERT-EU DDoS March 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1218.012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--54add4d1-ab65-451e-b3ab-2c045261b082
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1499.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c8cea6d-46d9-4a66-a23e-047dd02f756b
CERT-EU DDoS March 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1499
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5d37f644-31c5-414e-9a83-cb6fb36b87e0
CERT-EU DDoS March 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1570
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6485bfc6-53b5-43c1-9c52-6a35c3fc630d
Microsoft Preventing SMBATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1552
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6607178e-a8b4-4da9-b985-3712eb71a303
RedLock Instance Metadata API 2018ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1499.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69db7ce6-c72e-4710-9e32-48b0a6ca7675
CERT-EU DDoS March 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1071.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6a348a23-50cb-45e7-af72-57e2809f6d01
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1048
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6eec2d79-1d59-459d-af33-b186ece9748b
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1696.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ccf1c21-2044-4814-b02d-65195bdb1df1
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1219
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--80a23356-20b7-49a3-a48e-e0c04e2bff86
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1187
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--85c9285a-6738-42dd-aa12-fbded3e7bbdb
US-CERT SMB Security · US-CERT APT Energy Oct 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1205.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8bcfefd1-20c7-4784-ae07-3e693ecff605
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1498.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--92f524c5-86e8-43cf-90d5-907ac16acf5d
CERT-EU DDoS March 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1602.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--940764df-0039-40fa-a3c7-ce064ceed4ea
US-CERT TA17-156A SNMP Abuse 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98c5ba6b-bd0a-4b55-8556-cb73623b9493
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1219.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98fb9ba2-df83-48d5-a962-7de7070d567f
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9acd9add-9b08-45dd-8135-98e62eb708e2
Broadcom VMCI FirewallATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1048.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9c4621d7-76b4-4af5-838e-391236f521d2
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1071.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9f0abcfc-68b7-4e6c-9b9c-e511fdd2db00
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1090
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a424a85c-a3c6-4d84-85f7-e55c8dbe21fc
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1499.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a429ab16-3153-4753-b4db-4311b09811fd
CERT-EU DDoS March 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1537
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a5b61b67-8d99-4bc5-86d0-00739f0be666
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1602
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a78cac98-60e1-406a-8486-fcaf04a644e3
US-CERT TA17-156A SNMP Abuse 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1599
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac04879c-2316-4c3c-86e4-8fac1e80fb49
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1021.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bf3b7eae-a651-4a2b-9308-52fe2542766e
Microsoft Preventing SMBATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1557.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cea07509-b84d-4b25-b9e8-758a8e66b3f1
Cisco ARP Poisoning Mitigation 2016 · Juniper DAI 2020ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1530
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cf63b75f-564f-4713-a5b3-1f102d098e8e
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1048.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d65b3176-37a7-4072-90b8-38ac51dbe44d
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e8358b5c-392c-4abd-a81d-cdf615718276
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eaa4e3f4-e3f6-4c1e-9cbf-4801028abfea
US-CERT TA17-156A SNMP Abuse 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1071
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee0f724e-6622-40db-8a31-82fb6b361e0b
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1599.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f03e2a94-27c6-470f-9f87-7cac3c6845af
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1557.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f22a84ea-e4da-4a2c-8035-3eb972365bd3
Secure Ideas SMB Relay · Microsoft SMB Packet Signing · byt3bl33d3r NTLM RelayingATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1696.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f81a06a0-6561-4a64-a909-07def24113f8
ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1552.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fce13b14-c974-4de2-9dfb-7ad45bca85f0
RedLock Instance Metadata API 2018