CIS-3.3 Configure Data Access Control Lists

• T1005 Data from Local System — The control either restricts, detects, hardens against, or increases visibility into the adversary behavior associated with this technique. The control reduces unauthorized access opportunities and raises the difficulty of account misuse. • T1078 Valid Accounts — ACLs constrain which accounts can reach data and therefore directly reduce abuse of valid accounts and local data access for collection.