MITRE ATT&CKmitigation
M1002 Attestation
- Domain
- mobile
- Version
- 1.0
- Created
- 2019-10-18
Description
Enable remote attestation capabilities when available (such as Android SafetyNet or Samsung Knox TIMA Attestation) and prohibit devices that fail the attestation from accessing enterprise resources.
Related
Mitigates · MITRE ATT&CK (13)
- T1634 Credentials from Password Store technique
- T1634.001 Keychain sub-technique
- T1623 Command and Scripting Interpreter technique
- T1623.001 Unix Shell sub-technique
- T1625 Hijack Execution Flow technique
- T1625.001 System Runtime API Hijacking sub-technique
- T1630 Indicator Removal on Host technique
- T1630.001 Uninstall Malicious Application sub-technique
- T1645 Compromise Client Software Binary technique
- T1617 Hooking technique
- T1398 Boot or Logon Initialization Scripts technique
- T1404 Exploitation for Privilege Escalation technique
- T1424 Process Discovery technique