aol.pm

Execution Prevention

Mitigation · ATTACK:enterprise:M1038

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:M1038",
  "title": "Execution Prevention",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1038",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--47e0e9fe-96ce-4f65-8bb1-8be1feacb5db",
  "external_id": "M1038",
  "domain": "enterprise",
  "created": "2019-06-11T16:35:25.488Z",
  "modified": "2026-05-12T15:12:00.730Z",
  "version": "1.3",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (82)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1219.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--030cd687-e359-44ea-9d0c-0d718a1b2cb5

Microsoft Dev Tunnels Group Policies · Microsoft Dev Tunnels Group Policy Mitigation

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1216.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--037437e0-c3c4-4bb4-a3a1-b6f2fef82728

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1553.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--08dd36a7-dee0-4f25-b3dc-d030c32151f5

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--09082234-c658-45c4-9cd0-d4984b6bdf85

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--095e5f7b-288c-4995-8045-b691602d38c9

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1574.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0f955c85-17f5-46cf-bf5c-eece3b6c08ca

SANS Application Whitelisting · Microsoft Windows Defender Application Control · Windows Commands JPCERT · NSA MS AppLocker · Microsoft Application Lockdown · Microsoft Using Software Restriction

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1574.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0fc95a6b-296f-41ab-8663-aea4a80afe0a

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1546.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1174923e-8d3e-4932-9121-8f5fb7089c1e

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1564.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1279ae2b-fb00-4980-a5cc-9a802ad2901d

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1553

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--15b9b22e-7896-4219-8ec9-59b099644a6f

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1176.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--16a6739b-93e9-49ea-ae74-624623d3c07a

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1837a0e7-d8aa-4c96-8213-7d08ceb86390

Microsoft WDAC

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1a69dce6-b39e-4cd2-a29a-18e42293c51a

Default VBS macros Blocking

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--21ce896b-e6b5-4075-8d97-6b59c269247c

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1204

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--225ab1b4-f800-4a92-9949-a0f05fce6213

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1574.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--22ce2c93-ecd6-4627-b3f0-6f7476754c79

Microsoft AppLocker DLL

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1204.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--26d910c5-b1e9-4318-a715-dd1059fead3b

Microsoft PowerShell CLM

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1685.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--277e7284-90af-45b4-89f7-2eb0a559822b

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1129

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2c89cab1-efbb-405c-930d-197ae1910e5b

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.009

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2d712b2d-a9a6-4efd-b37e-1219768bdde7

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1548

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--35428082-1010-4e0e-ac4c-9f1426de7796

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1548.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--362b2f10-f599-4663-9cff-27932e11935a

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1611

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--365897c8-a97b-42e0-8fb8-cc08c23545df

Kubernetes Security Context · Kubernetes Hardening Guide

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1216.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--387cdc83-fc81-499e-8875-e3d4789af9c3

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1547.009

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3c0938ab-9272-492b-96f6-df6caea210e5

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--423ba5d2-6400-4e35-ba8e-dfbedd0b5303

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--42f4db8f-ef8b-4dcc-8c8f-4d0b5219c8b7

Beechey 2010 · Corio 2008 · Microsoft Windows Defender Application Control · TechNet Applocker vs SRP · NSA MS AppLocker · Windows Commands JPCERT

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1698

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--478e8052-1c7c-4852-b07c-34509e302393

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1127.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4b097b36-2a9a-4275-8ecc-7bb45dec821f

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.015

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4e1b6f6e-6741-45e7-856b-1efdb2f50ba3

Electron Security 3

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1219

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--54306888-1f93-4461-bcac-a56ae7073b31

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1216

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--54d2ea67-40fd-4fbc-b76a-01879aa5bff5

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--55670baa-97b1-44fe-abb8-0162b5a9663b

Microsoft WDAC

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1674

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--56c49c2d-ea1d-4cf8-a939-d0ceea7c47f7

Microsoft PowerShell CLM

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5853af0d-4716-4290-b3d9-63fadfd5f554

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--60e4698b-a16d-4a40-8473-4d88e2e70881

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1546.010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--65fa218e-b442-41ca-8fed-bccdb5523656

Beechey 2010 · Corio 2008 · Microsoft Windows Defender Application Control · TechNet Applocker vs SRP · NSA MS AppLocker · Windows Commands JPCERT

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6f5aaa40-a294-4b8f-8bd3-0f34ce8a0612

Google Cloud Threat Intelligence ESXi Hardening 2023

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1574

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6fa01dcb-e06c-4f8b-b6a2-c301f0198df4

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1505.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7742d5c6-6987-4a87-92e9-c213880d911a

Microsoft ISAPICGIRestriction 2016

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1547.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--796ea220-2948-461b-9948-4290eec8dbf6

Beechey 2010 · Windows Commands JPCERT · NSA MS AppLocker

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1699

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7d4dc95b-5614-410a-8a47-556b4e778255

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--809f6537-c7f8-4d96-ba16-5bffa897b52f

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1553.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--819bc603-b0fe-4681-a235-3c6e9a36e3b5

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1036.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--84185ab0-a7f3-4629-b553-dc6e24b0ed14

file_upload_attacks_pt2

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8541e1a0-0cd5-44fc-bc88-c96b474bcaeb

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8724cdb9-066b-41bf-ab71-57f375fbda43

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--87fd0088-41da-47ac-bd69-a8ac151a0d39

Microsoft PowerShell CLM

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1574.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--895ef30f-0b60-473e-829f-6c6d2aab5ab0

SANS Application Whitelisting · Microsoft Windows Defender Application Control · Windows Commands JPCERT · NSA MS AppLocker · Microsoft Application Lockdown · Microsoft Using Software Restriction

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1127

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8c0286e0-036d-4282-9e54-6938c958b7e9

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1490

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9104be87-33ad-4a35-96db-3e2ed5c17f46

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--950d7968-6a24-44aa-8a17-4a9c5cb64f96

Cisco IOS Software Integrity Assurance - TACACS

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--95e4e360-b867-48b4-a494-d9d148232b70

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--98d0fca0-b3e7-4f69-b5f3-527cdd4f48c9

Beechey 2010 · Corio 2008 · Microsoft Windows Defender Application Control · TechNet Applocker vs SRP · NSA MS AppLocker · Windows Commands JPCERT

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--aa103bc8-1753-4b41-bf5c-a9dc0b9a2986

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1546.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ab27d3af-d454-4a4c-801b-ea9a6c0d4b47

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1220

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--af393cd2-2a5a-41f8-a1b1-218f30beb4dd

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1080

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b0831323-de94-498a-8338-c60778bef95f

Beechey 2010 · Corio 2008 · TechNet Applocker vs SRP · NSA MS AppLocker · Windows Commands JPCERT

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.009

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b42d990f-4fa7-40be-9018-73c75130fcfe

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1547.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b783f90e-bd7c-4513-b15a-731637d7078d

Increasing Linux kernel integrity · Kernel Self Protection Project · LKM loading kernel restrictions · Kernel.org Restrict Kernel Module · Wikibooks Grsecurity

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1574.009

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b7a27a94-f036-4a0b-a96c-aa7bb1c7311f

SANS Application Whitelisting · Microsoft Windows Defender Application Control · Windows Commands JPCERT · NSA MS AppLocker · Microsoft Application Lockdown · Microsoft Using Software Restriction

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b7f73589-4640-468d-8422-04cfc7e7e110

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--be741f5c-f01f-4004-abb4-432882277636

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--be861f1b-0555-433a-b306-98c3903a566b

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1127.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c755a235-d278-41ed-835c-48e831b6d1a5

Microsoft WDAC

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1574.012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--caf19942-8346-447f-9781-28a0b858c43f

Beechey 2010 · Windows Commands JPCERT · NSA MS AppLocker

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1546.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ccec5b80-e16a-4379-926f-08c1c821497a

Beechey 2010 · Corio 2008 · Microsoft Windows Defender Application Control · TechNet Applocker vs SRP · NSA MS AppLocker · Windows Commands JPCERT

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1546.009

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--db8a5d74-11f0-4773-aae8-43a0a6f85f61

Beechey 2010 · Corio 2008 · Microsoft Windows Defender Application Control · TechNet Applocker vs SRP · NSA MS AppLocker · Windows Commands JPCERT

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1176

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dca371d8-d551-4848-bab1-e738a47b0acd

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1068

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dd9a12ee-30b1-4764-860d-111c73411ebe

Microsoft Driver Block Rules

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1176.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e13f1e41-fc5c-4cd3-ad6b-62bc597c959a

Technospot Chrome Extensions GP

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1553.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e6dd2026-0c65-4a42-a306-d525bb442ab3

Dormann Dangers of VHD 2019

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e7f93370-0bfc-417c-8811-627ab39fafca

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1219.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ea813141-a2a2-4e27-b30e-6e7c9f2980f2

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1036

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eb5ade8c-73e9-4b69-9dea-c8a8206dec25

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.014

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ed2229d5-d586-4986-b3ae-e5f788bb6e15

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f4702ee6-c04f-4ccb-95f3-1b40cf6c69c8

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1218.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f48b4601-28de-42d1-9ce6-84ad4608acba

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1564.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f9deebbf-5710-4e54-b4be-83404cee35da

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1609

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fd9cf3cc-51cd-4f13-b90e-2b8e274a4cc1

Kubernetes Security Context · Kubernetes Hardening Guide

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.