MITRE D3FENDdefensive technique
D3-SCP System Configuration Permissions
- Tactic
- Harden
Definition
Restricting system configuration modifications to a specific user or group of users.
Related
Counters · MITRE ATT&CK (22)
- T0894 System Binary Proxy Execution technique
- T1218.014 MMC sub-technique
- T1614.001 System Language Discovery sub-technique
- T1614 System Location Discovery technique
- T1564.005 Hidden File System sub-technique
- T1546.015 Component Object Model Hijacking sub-technique
- T1564.003 Hidden Window sub-technique
- T1564 Hide Artifacts technique
- T1552 Unsecured Credentials technique
- T1552.002 Credentials in Registry sub-technique
- T1548 Abuse Elevation Control Mechanism technique
- T1548.004 Elevated Execution with Prompt sub-technique
- T1546.012 Image File Execution Options Injection sub-technique
- T1546 Event Triggered Execution technique
- T1543.003 Windows Service sub-technique
- T1543 Create or Modify System Process technique
- T1137.006 Add-ins sub-technique
- T1207 Rogue Domain Controller technique
- T1218 System Binary Proxy Execution technique
- T1137 Office Application Startup technique
- T1012 Query Registry technique
- T1112 Modify Registry technique
Child of · MITRE D3FEND (1)
- D3-PH Platform Hardening defensive technique
References
- https://docs.microsoft.com/en-us/troubleshoot/windows-client/application-management/change-registry-values-permissions How to change registry values or permissions from a command line or a script