Skip to content

User Account Management

Mitigation · ATTACK:enterprise:M1018

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:M1018",
  "title": "User Account Management",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1018",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--93e7968a-9074-4eac-8ae9-9f5200ec3317",
  "external_id": "M1018",
  "domain": "enterprise",
  "created": "2019-06-06T16:50:58.767Z",
  "modified": "2026-05-12T15:12:00.731Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (123)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1580

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--00c4456d-cea9-43bf-913b-ec566699ce61

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1677

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--02c9e4fd-a17d-4661-8597-77526adc776c

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1078.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0561610c-dbcd-454f-aa33-8a68086c0b3a

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1543

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--06ef2810-b641-4142-83af-bbb00a598c11

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1040

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--075cdcb0-5a29-4ebb-bb0d-c2b22a5acec8

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1578

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0b74039a-c985-4587-bed7-0876f2ef1e6c

Mandiant M-Trends 2020

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1072

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0dfd9bcd-f9e2-44c1-9d87-07c626644561

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1021.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--10e6a721-82f0-42a3-b454-da5e338c59f7

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1574.010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--112eb215-e03d-4c15-8e8d-3d1b5e1096c9

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1213.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--126bd2ee-5d66-4bdf-822a-3fa55dff1468

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1578.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--16e9defb-683d-437c-9cdf-e1d75e5523dd

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1685.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1896ec8f-6d51-4939-a89c-a3788314366a

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1098.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1a545340-d4cf-40f1-a3e0-87ecdb957886

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1619

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1a5f8d73-a9c4-40db-9cd5-7f8a7aea19d7

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1b61ec0f-6c86-4d0c-ae02-7b2fb32754a7

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1053

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1d50b715-96a2-4fd6-bf92-603ad90730fd

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1556.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--21aa8534-0280-4109-8dfb-6adbc2310dd8

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1530

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--22dfe85e-3eeb-4b0a-ac61-b80f70a1f092

Microsoft Azure Storage Security, 2019 · Amazon S3 Security, 2019 · Amazon AWS Temporary Security Credentials

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1036

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--25207694-a0db-46df-bbe8-f700aeb80418

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1610

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--264f59d1-abb8-4f79-8a32-49879700af15

Kubernetes RBAC

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1197

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--279fa1bc-e514-4125-ab7e-51fb1da8a3f2

Symantec BITS May 2007

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1537

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--27fde8e9-ab78-43aa-9642-14ac0cd958ff

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1556.009

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2f4b8e65-7047-4e1e-bc88-18500a860e19

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1566.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--311f8c01-21ac-48db-a036-581e9e49f07c

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1546.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--38a350e5-634c-4dcb-8f6c-0615cdb37864

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1547.009

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--39080201-a56c-4daf-83b8-8ec09dd3baea

UCF STIG Symbolic Links

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1578.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--393a7e7b-0fe7-4b93-920f-fc1b62652c5a

Mandiant M-Trends 2020

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1134

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3c5f6c2a-7940-4cdc-8b25-811e33d9b96a

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1686.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--455d3c85-713f-44e4-816b-3825be78df8b

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1543.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--48c4d56e-e282-4810-b974-6a325b7d130d

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--48e6b5fc-9d82-4cdf-84aa-bc23647e1234

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1134.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4b3685f7-194e-466e-82a0-f8f112b224c1

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4bd4de17-4aa2-4924-a1fd-d82a68209cf0

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1609

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4d98988c-bac6-48da-9bc8-6e4375317fd4

Kubernetes RBAC · Kubernetes Hardening Guide

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1550.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ff3969a-4992-43c0-b4dc-02a21f5c9b2b

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1654

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--510fefe4-1f76-4c33-a447-2f85e3dc87e2

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1574

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--523ef32d-7463-4774-a473-fcccb5b0dadd

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1078

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--555abf76-531f-4d35-9783-ed7c2a3f213b

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1098.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--561ccbcd-578f-4af2-81aa-8594796b6909

Crowdstrike AWS User Federation Persistence

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1053.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--56efe93d-938a-4cad-ab2a-ff43a1f6e266

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1484.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--57563748-1634-4625-baa4-73a4b1d7dbfb

Wald0 Guide to GPOs · Microsoft WMI Filters · Microsoft GPO Security Filtering

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1547.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--58e37620-7000-4ec2-95e0-e1c651fa215d

Apple TN2459 Kernel Extensions · MDMProfileConfigMacOS

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1699

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5a6cec30-4e14-4f9a-ae7d-ebf883f147de

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1563.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5fc1a3c2-dfdb-41d9-97cf-fa6825078bca

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1098

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--64628ae8-0bc8-428c-b7e5-1d738bc55e78

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1569

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--64ebe849-d632-4af5-92b4-05e246b732c2

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1686

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--66bcb598-3414-4e4f-b17e-f835daa7f803

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1666

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6d6884e7-7594-43c2-847a-7e8cc7ef4ada

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1213.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--714ba6ae-8c53-4ce1-81f4-4ca81bbdb9b7

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1543.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--751d1faf-0685-4a1b-8a72-de34bfd6da7e

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1485.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--759cdb17-8d35-4372-8a9d-eae658f0bb31

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1697

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--780da253-55c0-4557-bc43-0a425a6cff2f

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1021

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--795ca238-c8cf-4735-98cc-593f1cc59b16

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1685.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7c080252-2bd3-4fb3-98aa-e822a3703455

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1550.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e5e2fd3-cab4-4853-81ad-9bf50e1390bd

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1555.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7ed11b3a-c4c1-4c31-8614-d34a37d8a779

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1484

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7eeaeee6-9ac5-440f-9c31-2e4a915b637e

Wald0 Guide to GPOs · Microsoft WMI Filters · Microsoft GPO Security Filtering

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1548

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8052b9cf-2e89-49c4-a294-4ee42c6c6e03

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1078.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8543032a-2f76-4837-90d3-ffd54f6e8708

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1547.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--884d34c0-8423-484f-8151-e158831d6531

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1686.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8a4dd18f-d427-4f3f-b92d-e75e3af39a2b

Expel IO Evil in AWS

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1213

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8b3f2915-ca04-4770-88bb-e6f1314da34d

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1675

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8c85cc49-731e-44ae-b8a0-2162444e9ee7

Broadcom Virtual Machine Guest Operations Privileges

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1021.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8fae4ace-c3b5-4c4b-8c1a-98a32c692849

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1484.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9336c4ae-22c1-4f45-bbba-5cf3f51553aa

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1578.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9ce9ab1f-b4fa-41e7-8302-11c30f918001

Mandiant M-Trends 2020

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1606.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9cf6e55f-3014-4292-a393-9418c6e6b4a1

Microsoft SolarWinds Customer Guidance

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1134.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9da590e3-3447-4401-8ac7-f6c7482e4aed

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9fad01af-77b7-44b2-a3fc-0a7b338b9ace

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1566.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a3a8c9e7-ed71-46c9-aa1f-c609406652b0

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a3d4b793-b11a-4d6d-9a72-8c592a1eb834

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1199

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a42398e2-3daa-452a-80f8-f06660328f18

Office 365 Partner Relationships

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1110.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a69c1383-0afc-40d5-879c-fda561aff983

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1185

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a9f79f14-d160-4be5-8bbe-ad0b52770b9f

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1195

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--aa751028-fabd-40d6-aedd-26b850a80056

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1021.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b16c27b4-f94b-43e4-832d-986c03b96ffd

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1685.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2d8b329-5812-4b81-b05a-825da8635db2

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1134.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b32af0e2-1bdc-4b62-a95d-cd1d73919dba

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1489

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b5023b20-4243-4686-8b51-429ae7ac73cb

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1657

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b549bba1-8a99-44f7-8aae-cd48838608f3

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.