Audit
Mitigation · ATTACK:enterprise:M1047
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:M1047",
"title": "Audit",
"type": "Mitigation",
"source_url": "https://attack.mitre.org/mitigations/M1047",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "course-of-action--cc2399fd-3cd3-4319-8d0a-fbd6420cdaf8",
"external_id": "M1047",
"domain": "enterprise",
"created": "2019-06-11T17:06:14.029Z",
"modified": "2026-05-12T15:12:00.731Z",
"version": "1.3",
"aliases": [
],
"tactics": [
],
"source_references": [
]
}Explicit source assertions (111)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1484
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--02a7cdce-3386-4a5f-a9c4-a8ab2d3a9091
GitHub BloodhoundATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1059.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--03b2c5b8-aeca-4232-a206-521b83d56c54
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1036
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0446f0ed-4214-4294-ba65-962b4fe08b08
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1482
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--047e6dc3-d213-4d97-8573-9c8da28a0742
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1053.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--06287ae2-325c-448e-8790-3c37492e1c29
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1574.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--09838bf8-4d67-4d21-b44e-ec5786182cc9
PowersploitATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1505.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b6d433f-6908-4226-bda8-39ac6dac0bcc
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1686.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0ceb42f3-b6c9-4c34-9e6d-d9bb00809ab6
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1176.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0e686457-461d-496b-b838-dc8ca57a9f32
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1505
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1071d72e-9ea8-43df-8e82-2831fe0652b7
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--10f92e54-e986-423e-8fcb-cc2f420e2421
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1566
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--12fc907f-4ed1-4d44-a40b-12bfa8b89082
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1484.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--19e387c4-0dd8-4c00-9195-73ed25ad061e
GitHub BloodhoundATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1539
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1a5bf948-33fd-4025-aadd-117e99512e6a
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1505.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1c97ecdd-5195-4242-9007-380cc46ef384
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1564.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--23aee030-3467-494e-8262-c32b35355958
MITRE VMware Abuse 2024ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1686
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2496b1fe-0a73-4918-82e6-7f2a07c44353
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1686.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--28888941-36e8-43b7-ac44-14d25fa17484
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1574.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2d0b7e52-9c7a-47dd-ab12-4dc6942f49f1
Vulnerability and Exploit Detector · Microsoft CreateProcess · Microsoft Dynamic-Link Library SecurityATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1685.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--31ca8630-4b0a-4e5f-a3eb-45c8ee8841ad
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1021.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--36e86ea2-e0d4-4ade-bae8-212a78c8d569
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1564.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3b2ca38e-351d-4595-8ddb-17b648f196ef
Microsoft Manage Mail Flow Rules 2023 · Microsoft Get-InboxRuleATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1548.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3bc57dac-c8b3-4d6d-8f4c-3e7d515cdf87
Github UACMeATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1558.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3de2faf5-8019-4aad-a317-fb66554cd2c0
Microsoft Preauthentication Jul 2012 · Stealthbits Cracking AS-REP Roasting Jun 2019ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1027.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3de96229-d45b-47b2-9515-4eadd0023115
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1053.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e76b11e-8a9e-4300-b9d4-8cbd8e8bb37f
Secureworks - AT.exe Scheduled Task · Kifarunix - Task Scheduling in Linux · PowersploitATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--40f51fdc-cd3c-4e93-9593-e1ee7cf2211e
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1671
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4797263a-01a0-4053-ae5c-54cf53217e97
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1550
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4aa81ed2-b2d8-490f-a0b4-e0d2e5772acc
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1552.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4abb5175-7caf-41c8-83a6-1ce459cf72df
ADSecurity Finding Passwords in SYSVOLATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b564cd9-d1c8-4f9d-b922-b6a651497edc
CodeX Microsoft Defender 2021ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1528
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b5948b4-eba5-4af6-93d1-71b109167f62
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1574
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4cc78773-df9f-40d8-a2e5-eb2eadb05409
Vulnerability and Exploit Detector · Microsoft CreateProcess · Microsoft Dynamic-Link Library Security · PowersploitATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1610
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4eda0bd3-66e3-4773-9616-78ab8f60cbd5
Kubernetes Hardening GuideATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1606.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5208729f-fc13-477a-984b-1035c581ad02
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1213.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--579ff596-a4eb-486f-878e-2f8434611d00
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1213.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5e09a01c-8dc8-4ada-bfaa-b2298a39eece
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5f90f8ec-9154-4f28-a632-fd4024e6fbce
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1546.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--60ee4eba-cd3c-4558-aeba-0c5551f20dae
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1564
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--61e737e5-58d1-4a65-86e2-061466f2ff54
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1543
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--65b98884-b04d-424a-a89c-c4f52565e160
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1558.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--67413fb8-ef1c-4ba7-b60b-fd7ad75f8a69
Brining MimiKatz to Unix · audits linikatzATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1213.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69e06021-a60c-49ac-840a-47ae154dbba8
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1556.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b8bbbca-a50e-49fa-a851-f43a8c21f635
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1563.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b9e7925-876a-49b1-8b42-e789401f2fad
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1021
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6da682e8-f3e0-41ed-95f2-c268c686abd1
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1578.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6f8f4546-9e1c-42c9-b76f-863e51d6cb2a
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1021.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--703ea9d2-9caf-4753-8485-d12a0e9a2817
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1176.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--72743007-3292-4f1a-9d68-88d39f145ea6
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1552.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7494c5ff-db1c-4bba-8ec0-8a6678b28900
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--75122837-7638-4ff2-8cb4-fbb8001e96f2
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1070.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--80e1e1e0-a60e-4ba6-a19a-4bc7a94f1cc6
Microsoft Manage Mail Flow Rules 2023ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1059.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--850542ca-92d9-45cb-8c5e-b8b0305adf54
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1550.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--86f6ea64-eb95-4228-956f-eae82b8f49d8
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1684
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--87303a3c-4a04-4d0c-b382-104593054162
Proofpoint TA427 April 2024 · Unit 42 Global Incident Response Report 2026ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1606.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8a716922-181e-409c-b112-851e7f172d7c
FireEye ADFSATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ad2d1c5-aa94-4c32-94c8-8ffb9d11f54a
Google Cloud Threat Intelligence ESXi Hardening 2023ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1087.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8b9e5b99-2df6-47b4-9c97-9bf8dd01821d
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1556.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--90d0d818-4a80-459c-9d57-ca9221eae57b
Mandiant Cloudy Logs 2023ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1578
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--91c4630e-772b-4dac-8e58-5a899ccdc2be
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1560.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9448e565-a9ea-44c2-9c03-8f6112cd7d1d
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1548
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--94d71c18-e2af-4dfd-aa2f-28ca68a772ab
Github UACMeATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1036.012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--964b451b-103a-4bef-9a1f-a2078cd81cf9
W3CATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1213.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--99e7e929-1e72-4d9a-8997-15f977f36218
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1685.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9a063196-5031-426a-a75a-ec7a2b479951
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1578.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9a99712e-ea3c-47f7-a2f6-6109b9d0d4c3
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1566.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9b91755d-2b83-438c-bd25-0e71c540310a
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1552.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9c4bd197-08a2-4ded-baba-bd70b6b4afd0
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1053
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9d4e8b44-90f8-4a10-8419-8187d4babf24
PowersploitATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1574.010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9d4f0626-8d26-4187-a80b-df1467ce2dbb
PowersploitATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1560
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9e0cc38c-17a0-4320-b9b4-dc8458a9bb79
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9f42ded2-e291-4856-91ab-cf5ff8be461a
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1505.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9f93da44-6aa1-4f59-95c7-89c849423da9
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1685.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a028a375-316c-4a42-ac0f-da77ca5769ef
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1176
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a22dffc4-ff73-4845-895a-ecd21e8549b2
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1213.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a50651b9-581a-4c77-b383-679a9c42e2b5
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1556.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a5cca5a1-35c5-4e96-a343-3e2c81a0a202
MagicWeb · Mandiant Azure AD BackdoorsATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1552
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--abe43d10-714a-4f29-b164-d7cadd83cb61
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1578.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac440832-cb04-409e-87fa-558097a898b6
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1574.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ae13555e-3275-43c5-b388-59478160d01b
Vulnerability and Exploit Detector · Microsoft CreateProcess · Microsoft Dynamic-Link Library Security