M1011 User Guidance

Mitigates · MITRE ATT&CK (49)

• T1636.005 Accounts sub-technique
• T1676 Linked Devices technique
• T1670 Virtualization Solution technique
• T1521.003 SSL Pinning sub-technique
• T1663 Remote Access Software technique
• T1662 Data Destruction technique
• T1660 Phishing technique
• T1658 Exploitation for Client Execution technique
• T1655 Masquerading technique
• T1655.001 Match Legitimate Name or Location sub-technique
• T1640 Account Access Removal technique
• T1642 Endpoint Denial of Service technique
• T1643 Generate Traffic from Victim technique
• T1644 Out of Band Data technique
• T1417.001 Keylogging sub-technique
• T1430.001 Remote Device Management Services sub-technique
• T1626.001 Device Administrator Permissions sub-technique
• T1629 Impair Defenses technique
• T1629.001 Prevent Application Removal sub-technique
• T1629.003 Disable or Modify Tools sub-technique
• T1635 Steal Application Access Token technique
• T1635.001 URI Hijacking sub-technique
• T1636 Protected User Data technique
• T1636.001 Calendar Entries sub-technique
• T1636.002 Call Log sub-technique
• T1636.003 Contact List sub-technique
• T1636.004 SMS Messages sub-technique
• T1418.001 Security Software Discovery sub-technique
• T1627 Execution Guardrails technique
• T1627.001 Geofencing sub-technique