aol.pm

Encrypt Sensitive Information

Mitigation · ATTACK:enterprise:M1041

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:M1041",
  "title": "Encrypt Sensitive Information",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1041",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--feff9142-e8c2-46f4-842b-bd6fb3d41157",
  "external_id": "M1041",
  "domain": "enterprise",
  "created": "2019-06-11T16:43:44.834Z",
  "modified": "2025-04-02T17:28:57.029Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (33)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1659

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--055797c4-d3fe-4c7d-b921-ca3665f02f72

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1552

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--069ff8f0-889c-4463-bf5d-618bf5e457ee

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1557.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--07bc8502-7a60-4d19-b1e1-f4fb081ed50d

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1557

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0d891052-0c98-4d4a-8d1b-42a02f656eaf

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1070

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--185c194a-5823-46e4-9719-9de48c3c1734

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1602.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--38762462-11f6-4f44-bda3-4da3c2c8d70d

US-CERT TA17-156A SNMP Abuse 2017

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3e3f06c4-3105-4d07-b876-702005e9b59a

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1565.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ba4eefd-1387-4eee-9c6d-aa2ba19faf9c

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1565

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--51244880-c155-4dba-844a-2021304c8954

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1558

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5574a01e-efcc-49d6-8692-30c97c611397

AdSecurity Cracking Kerberos Dec 2015

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1530

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--55fa32b7-b9d2-4c57-9614-b7793b2770f2

Amazon S3 Security, 2019 · Microsoft Azure Storage Security, 2019 · Google Cloud Encryption Key Rotation

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1213.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6095f810-6d06-435f-9a16-a643bf8055df

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1040

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--70d446a5-349f-4b70-9446-90e872adac42

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1114.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8178dba2-1469-4322-af59-f6935152deb0

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1602.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--86c58566-41e5-452f-b649-b481bfbd1202

US-CERT TA17-156A SNMP Abuse 2017

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1685.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8fdfaa48-8004-4b46-a5f6-a5f6a1bac593

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1119

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--967c7069-6bb3-4f10-ba6b-5befdabe6c97

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1649

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--98b6508c-5f00-4c06-a906-4fd7ce74bc62

SpecterOps Certified Pre Owned

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1114.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9e134214-4cb2-438b-9306-22e7d1ea80fe

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1565.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a665756c-06f8-44a2-b6e6-5143d1d59400

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1558.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b05e473b-ac33-42ce-b7c6-a2a8517def0d

AdSecurity Cracking Kerberos Dec 2015

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1669

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--be61d574-ada4-4575-85ed-0665905fa7e0

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1114

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c15c9cbf-7ecc-4e2b-8fe1-636f381bac63

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1558.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c2bc4c63-486f-4c92-9eaa-ece8226ec70c

AdSecurity Cracking Kerberos Dec 2015

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1020.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ca433ac6-fb5a-41bc-969b-4721571fe836

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1685.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--caf01f2a-09e8-471c-a306-176c5bb93b71

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1602

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cee1cfd6-0906-4b52-a8b4-d0d585632b81

US-CERT TA17-156A SNMP Abuse 2017

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1003.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e6b41083-5390-452d-991c-de86befbe6e1

Metcalf 2015

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1552.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ee382a02-cde0-49a8-89e2-26237a25740c

Microsoft Primary Refresh Token

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1550.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--efafd777-c53d-4459-8765-2e5e44cd0ea1

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1114.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f5d32cc0-dc9e-4ff4-8af2-b131c303a1a1

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1213

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f6d679df-1b24-4f80-a50e-96ee86b881e9

ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1558.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fe445c04-05c2-4370-b00c-3821dac9c1ae

AdSecurity Cracking Kerberos Dec 2015

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.