Disable or Remove Feature or Program
Mitigation · ATTACK:enterprise:M1042
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:M1042",
"title": "Disable or Remove Feature or Program",
"type": "Mitigation",
"source_url": "https://attack.mitre.org/mitigations/M1042",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "course-of-action--eb88d97c-32f1-40be-80f0-d61a4b0b4b31",
"external_id": "M1042",
"domain": "enterprise",
"created": "2019-06-11T16:45:19.740Z",
"modified": "2026-05-12T15:12:00.731Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
]
}Explicit source assertions (72)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1547.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--025b9140-a0aa-4802-b60c-a4fcb886f90c
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1021.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0263d539-39f0-45ca-be2d-0f9198db9af0
Apple Unified Log Analysis Remote Login and Screen SharingATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1671
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--03a0056f-4d2f-4ef2-b33f-907e6ef30aa9
Microsoft Entra Configure OAuth ConsentATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1021.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--03e384be-6fdd-4967-99a9-6dac5af75729
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1210
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0694f0b0-c7c1-43c6-8024-17122fda2bc4
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0f27ea83-21e7-4a9f-9c66-85fe85da5135
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1595.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--117756fe-fb41-414d-81ab-63e0bb1ccdc8
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1021.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1677745c-06d5-4791-be9c-1104549c34b2
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1559
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--16f46969-91e3-4bcd-8d58-97e88e6b1d3e
Microsoft DDE Advisory Nov 2017 · BleepingComputer DDE Disabled in Word Dec 2017 · GitHub Disable DDEAUTO Oct 2017 · Microsoft ADV170021 Dec 2017ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1564.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1ec28c41-586b-42dc-9400-6e6313e38d84
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1557.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2fb84998-3f4a-4ce8-9709-daa95d18186a
ADSecurity Windows Secure BaselineATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--32d482c4-2c0d-4688-a38b-d73b5b2962a3
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.015
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3329382e-c40f-44a2-82c3-fb1479c3b6d2
Electron Security 2ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1127.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--336dc2ea-855a-4725-9112-b71739b95b58
Microsoft Learn ClickOnce Config · NetSPI ClickOnceATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1649
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3881a82b-37fa-4e91-a411-a0f2b4410749
SpecterOps Certified Pre OwnedATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1114.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--38b2c8da-e69e-4e17-8ba9-c967d7af3a0a
Microsoft BEC CampaignATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1557
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e3c926e-4f21-40f0-b869-6b3c0e35e243
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3f407ec6-355d-4741-903a-a58c726f78d1
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1098
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--45e8c03d-86f3-4cc0-907b-1e1d13960e43
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4f313b03-22ae-4789-aef2-12121e9f717d
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1052.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--553aadc2-8c1c-4ad7-b974-c65f99f6a892
Microsoft Disable Autorun · TechNet Removable Media ControlATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1553.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--566db8cc-9dd7-496b-8d40-e510fcf6b9fe
GitHub MOTWATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1505
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--57350311-f2bd-4ca8-ba95-67c255422bbb
ITSyndicate Disabling PHP functionsATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1127.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--59204009-bb1a-45f4-b446-dd6d8173a8ab
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5a580cd0-19f1-41d6-865b-786a41081a7e
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5a72e713-c8fb-4438-9a08-0ded824381dd
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1091
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5b2d2786-1ccb-41d9-90dc-4e11d517bfe2
Microsoft Disable Autorun · TechNet Removable Media ControlATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1137
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--62d8cec2-c94f-4a18-ab0a-0a182e30f33a
MRWLabs Office Persistence Add-insATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1697
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6342f9f0-d7d7-4568-b5bb-33f775c0b0f2
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1546.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6a13bd6f-fa86-4fdd-9add-6446ef2679b0
TechNet Screensaver GPATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1059
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6abc6901-d152-4b5f-b27d-8b973ae567cb
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1021.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6fa7ec61-ea14-40d1-b023-d8fd18738da9
Microsoft Disable DCOMATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1021.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--703a5971-a542-4d7d-8bf5-7a9adb1db852
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1555.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--841330d7-96f7-453a-9a91-9dd2c6e1cfc4
Microsoft Network access Credential ManagerATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1092
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8506f2ac-e856-4d13-ac7e-fc88c4ec3c15
Microsoft Disable AutorunATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1563.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8aa82bc1-bd38-482d-9cb6-b83877e0b0f4
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8bc92d99-f6ea-4ec8-9c23-cc910b17809c
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1563
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8c271707-cc73-4cb5-a554-75d74abafac9
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1098.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8faa230d-ced2-4289-81c5-554fd6dc62fd
Broadcom ESXi SSHATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1557.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8fe9affe-bf8d-4392-882d-d3e737eb5c43
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1219.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--920bf6ed-ca97-4d30-8520-1af593872770
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9767394f-960b-47d4-8123-cfcc5d6ab66a
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98afbb05-d48e-4438-add6-df3ea9fb568c
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1563.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--99ea03d5-6c11-4f5e-9ab1-13ee0f4fca43
Symantec SSH and ssh-agentATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1133
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9aaf5e70-4080-4f73-8d6d-3b19f754e9b9
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9d44abc9-f1f3-4111-a474-7dd0b224dd46
Microsoft AlwaysInstallElevated 2018ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1564.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9f001062-668f-45c9-a747-f224c8e5712a
Microsoft Disable VBA Jan 2020ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1059.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a2eb983e-f4ad-45a3-9348-088bbfdbab77
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1609
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a3a13b78-f599-4635-8750-2603bf18b370
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a6352ede-7afb-4be5-bba4-bd5c0a20bae6
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1127.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a6c274f5-43e1-4f69-a182-0c4ab9d0a5ed
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1011.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aa23c885-30a5-4715-bf64-7ccbfaba9131
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.014
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac005901-af89-4bcd-bb7f-515539dbb96c
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1552.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac4beabf-1644-4386-b34a-ebfc6e3bd3b0
Amazon AWS IMDS V2ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1546.014
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b02a8c2b-3ead-4546-9e68-d1545c5fcdd7
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1021
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b3cf2464-2602-4a88-8e7a-dda56eff05ff
Google Cloud Threat Intelligence ESXi Hardening 2023 · Broadcom ESXi Lockdown ModeATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1021.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b4eefafe-e3d6-4b25-8485-7022c00cc462
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1137.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--be510dc5-eae7-4231-808b-645a7b04c15a
MRWLabs Office Persistence Add-insATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1505.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c077dd0a-7568-400b-9aad-e0535f356f71
ITSyndicate Disabling PHP functionsATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1205
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c2a79396-f264-4439-94f1-113e3bf3a6be
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c8c7f580-982a-4efc-8a2a-e007e7f07220
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1052
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c8ff6191-a8ac-4f12-b336-a2e0c7644082
Microsoft Disable Autorun · TechNet Removable Media ControlATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ce47df8d-02dc-4380-90f8-282e009ef0fe
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1221
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cf485f42-cc2f-4ef7-9226-533192a9413c
Microsoft Disable MacrosATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1559.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--df52b929-6b31-48da-a21f-70b799e730d3
Microsoft DDE Advisory Nov 2017 · BleepingComputer DDE Disabled in Word Dec 2017 · GitHub Disable DDEAUTO Oct 2017 · Microsoft ADV170021 Dec 2017ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1689
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e23ef770-4ade-44f2-a1ac-b524e77ce9cd
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1098.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f212430d-160e-4676-b541-8a7cb818fe6f
Gmail DelegationATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1127
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f4e83a18-a2bf-45af-aa6b-18f72646d8b6
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1611
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f705286a-3372-4343-b74f-cab6ff672774
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1219
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fa4c9d5a-3329-4138-b6e1-990cd7935b87
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1098.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fb4099dc-c44a-49c4-b12e-5e58a5635bf4
ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1218.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fd38c0fc-72d8-4638-b6e7-1f6c5964ab5c