aol.pm

Software Configuration

Mitigation · ATTACK:enterprise:M1054

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:M1054",
  "title": "Software Configuration",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1054",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--b5dbb4c5-b0b1-40b1-80b6-e9e84ab90067",
  "external_id": "M1054",
  "domain": "enterprise",
  "created": "2019-07-19T14:40:23.529Z",
  "modified": "2024-12-24T14:02:11.579Z",
  "version": "1.3",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (36)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1566.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--005b46de-6241-413e-ba13-e0c2cc8efa77

ACSC Email Spoofing · Microsoft Anti Spoofing

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1688

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--07969240-a4ee-44e7-a9ee-b3386c6222cd

CyberArk Labs Safe Mode 2016

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1550.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--10017b2e-7234-4368-81d7-a4c8b98c26a0

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1602.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1cd3a9af-420f-45b6-a8b1-246332b1c49d

Cisco Securing SNMP

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1539

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--248a0d72-d9cd-43d3-985f-a33a49a79e8b

Token tactics · Session Management Cheat Sheet

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1553.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2981e224-edec-454e-91da-5dcad30572c1

Wikipedia HPKP

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1137.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--375f4ab4-542f-42f6-9577-f66a6e20f9ca

Palo Alto Office Test Sofacy

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1559

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--39a3fc74-012e-47fc-b806-d9267a0f54ba

Enigma Reviving DDE Jan 2018 · GitHub Disable DDEAUTO Oct 2017

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1666

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3dd8c9cd-e9ad-4f3e-a4a6-0d4ff0904980

AWS RE:Inforce Threat Detection 2024 · Azure Subscription Policies

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--568ce97a-d845-41a3-828a-49b372fa46d6

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1684.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5819aaec-f717-4a6e-8e06-bcd94a6e637b

ACSC Email Spoofing · Microsoft Anti Spoofing

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1213

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--617db1e2-ad66-46b2-8dfc-02094a861754

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1535

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--70add783-c72c-4048-ba94-5e1e79c2d679

CloudSploit - Unused AWS Regions

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1598

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--727520dd-a7ee-4665-a610-201f0d5e2f0e

ACSC Email Spoofing · Microsoft Anti Spoofing

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1566

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7b090d29-d49d-4967-9843-90636bfb039f

ACSC Email Spoofing · Microsoft Anti Spoofing

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1537

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8389c9f5-ace5-4240-a694-7008313fc168

Google Workspace External Sharing · Microsoft 365 External Sharing

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1677

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--851a8d0f-dabb-4e78-93bd-6f8aa6893c5d

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1602

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--872ba9c6-8e0d-48af-864b-de83b906baf1

Cisco Securing SNMP

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1213.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8746c004-3a55-43d0-871e-ebbf792cc9cd

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1543.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--89210755-a9d6-4f6d-b485-1484a0d6db55

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1689

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8940b29f-23b8-4b13-b529-5bc56b1f7552

Chromium HSTS

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1602.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--91baa343-383f-4010-b799-67e42bd8a016

Cisco Securing SNMP · US-CERT TA18-106A Network Infrastructure Devices 2018

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--985f770f-6068-4c5c-9405-0515e43aeed5

ACSC Email Spoofing · Microsoft Anti Spoofing

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1559.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9912d67b-153f-428e-9751-e6c09c8de945

Enigma Reviving DDE Jan 2018 · GitHub Disable DDEAUTO Oct 2017

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1543

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--99f3e59e-6e6e-4602-83df-52de4cbf6abd

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1590.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9e6ba901-ece5-44a0-8315-1f9b833fe78a

DNS-msft

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1213.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b7a46041-8eb6-4756-b633-f5bf89310f50

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1546.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ba660d12-81f6-49fe-baf2-fda6d5bda761

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1555.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cc2f4b77-5b2f-4942-a6c0-9c2a19e1f7b0

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1606

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ce647878-e4d9-4472-9777-b731edbd3d9a

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1553

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d9c08e10-909d-46d0-aa15-b99d1487be62

Wikipedia HPKP

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1606.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--db2c5201-2ced-482d-913b-8dee1499441a

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1667

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f5097f4c-c1e4-4177-9985-31c017e32adc

ACSC Email Spoofing · Microsoft Anti Spoofing

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1137

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f6f38033-ddd4-418a-ad70-b1198df67fc3

Palo Alto Office Test Sofacy

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1598.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fe67405d-7fa3-4053-b52c-25dbd4ef3479

ACSC Email Spoofing · Microsoft Anti Spoofing

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1598.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fe8f4b79-9495-4e08-b14e-d2954f847c78

ACSC Email Spoofing · Microsoft Anti Spoofing

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.