Network Intrusion Prevention
Mitigation · ATTACK:enterprise:M1031
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:M1031",
"title": "Network Intrusion Prevention",
"type": "Mitigation",
"source_url": "https://attack.mitre.org/mitigations/M1031",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "course-of-action--12241367-a8b7-49b4-b86e-2236901ba50c",
"external_id": "M1031",
"domain": "enterprise",
"created": "2019-06-10T20:46:02.263Z",
"modified": "2026-09-03T19:46:42.143Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
]
}Explicit source assertions (62)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1696
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b38630d-1363-4817-9788-e5848e1f0f36
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1568
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0c2dadcb-36c4-4255-a53d-e54f1bb71c5f
Cybereason Dissecting DGAs · Cisco Umbrella DGA Brute ForceATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1542.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--123c8150-c814-4bf2-b06f-e005cb257e17
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1469ff36-c655-4513-8ffa-81dcb55c4ae6
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1572
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17639fa3-3f77-4481-b24f-9df82fcbf324
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1071
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--19f35c88-92c4-4e98-b024-be9f6731bdb5
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1048.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1a493d52-b97f-4cf3-a85b-1e9aaa66a410
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1ddae833-8280-4afa-b2b0-e250e22104fe
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1132
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1e2075a3-5271-4ebf-aa9b-6a09ea985b76
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1568.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1e624981-b765-41ac-a2dc-468ba07e3614
Cisco Umbrella DGA Brute Force · Akamai DGA Mitigation · Cybereason Dissecting DGAsATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1102
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3024f916-b25c-4dd8-aab3-4d681b335da1
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--34503727-d78b-4e67-b944-83546cc473e2
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1104
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3a348ba8-5608-4e9b-a180-f66cfad9896e
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1090.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3c67124e-e215-4c33-aff7-7a7b98735a0f
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--418bde38-35eb-44bc-a454-ad7d2918bda5
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1204.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4e35764e-ffcc-4d25-98b9-8bf44c3eb2ad
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1048.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4ff00908-ef82-45dc-bb71-bf1cea80063e
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1048.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--51d3bdc8-5fe4-470a-9ffa-5497caf4493c
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1557.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--55e36f24-f7dd-4966-b39f-88349b86fff3
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--64fa019e-5eb1-404c-9488-d4083ccc8b65
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--651225d6-5454-4c44-8d62-776bd7ddaed2
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1557.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6a1dd165-a32a-405c-8c1b-c0a17c8ce710
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1570
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6f1f4c7b-dc86-44e3-9ff2-ea9451ea90ee
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1557.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--70f6424e-7bc0-4baf-9ed5-46f6e9b72427
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1204.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7194f06c-abd5-4ff8-ad95-2449adaa4c13
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1566
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--76588f90-79b8-4a61-ae07-3321393e5707
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1071.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--78b31fa7-10ef-4c28-888e-71da978e9e81
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1204.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--78effe60-8ebb-44d1-9b3f-681dd847041e
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1557.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--796be792-45ef-4052-bcee-1ce1384a80f7
dhcp_serv_op_eventsATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7a75d200-29f5-4f8a-b052-bcbe4e5ca236
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1048
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7bdcd3e6-f741-4f62-9495-3111309adad8
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1204.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7fa20508-8d9f-4070-8e8b-b71eefade05f
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1001.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7fd7a4ea-aa95-4037-8bb2-0ff6b06de179
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--82cf0b15-1cd0-4539-b3fe-63ee4d379113
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1090.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--864def70-2079-4015-8852-d77e19dd086c
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1204
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8e567361-e2de-4dc6-b953-ec82dc143f58
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1557
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--911ca56b-8fd3-4efc-855c-f1754c8b05b7
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1602.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9160a38d-799b-431d-a5d1-a9b4099ab8b1
US-CERT TA18-106A Network Infrastructure Devices 2018ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--95d846ca-5705-4a69-9d76-7d886ce86cec
US-CERT-TA18-106AATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1029
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9802575b-e7bf-417b-8c4e-cfa922e2792b
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1102.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9b9f3a63-98f1-4ea5-9c64-00bc6f237778
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a0a004fe-2636-4f6d-85c7-2401768252a2
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1221
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a24399b5-218e-41b5-8904-9e8e0599ae25
Anomali Template Injection MAR 2018ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a601c8b3-4d54-42d9-a2fd-61455a5dff4a
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1071.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bd072d13-3815-46eb-ae84-1aba38db3fab
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1414165-48e9-4bd7-a5af-72d61d2ec2d1
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1573
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1b721af-9d2b-47a2-a712-3bff64628148
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1001.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c2097180-b02f-4ffc-b0a6-8e8bb899a551
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1602
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c217ea78-f411-4dd1-a019-8aa3e366df23
US-CERT-TA18-106AATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1001.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c64b3644-a838-4ed3-a6f3-fc770637b009
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1071.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c9f53392-065d-4573-a08a-37bc3d24d3e5
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1102.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb55e462-8b1d-4916-8f69-087538d0d209
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1090
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d50b5687-ea69-40f9-86f3-eecd7e015bac
University of Birmingham C2ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1219
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d5c70727-794c-4404-b30d-0d798a62ad64
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1696.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e2ed7595-fbba-43d8-bee4-e44081ee870c
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1542.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e8dda697-0d9b-4c99-baa1-1d64f7dd5a02
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1571
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f07b76ab-6e72-4112-bc23-3b64b50131f0
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1696.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f3448343-3bfe-43e0-8574-075d84b842fb
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1071.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f45923c0-e2eb-463b-97bd-4197384f24e1
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f4d0878b-5e03-439b-84b4-3909a1962016
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1132.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f8e6711c-de3d-4c9f-a255-96fa7719e0a4
ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1102.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff5db468-c3a7-4292-9a50-237cf163cb37