Version 15.1 → 16.0
Data Sources — Enterprise ATT&CK Changelog
Modified Data Sources
| Description |
|---|
| A profile representing a user, device, service, or application used to authenticate and access resources |
Details
Values Changed
| Field | Old value | New value |
|---|---|---|
| modified | 2022-12-07T19:50:43.993Z | 2024-10-14T22:11:30.271Z |
Iterable Item Added
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Office Suite | |
| x_mitre_platforms | Identity Provider |
Iterable Item Removed
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Azure AD | |
| x_mitre_platforms | Google Workspace | |
| x_mitre_platforms | Office 365 |
| Description |
|---|
| Credential material, such as session cookies or tokens, used to authenticate to web applications and services(Citation: Medium Authentication Tokens)(Citation: Auth0 Access Tokens) |
Details
Values Changed
| Field | Old value | New value |
|---|---|---|
| modified | 2022-03-30T14:26:51.807Z | 2024-10-14T22:11:30.271Z |
Iterable Item Added
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Office Suite | |
| x_mitre_platforms | Identity Provider |
Iterable Item Removed
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Azure AD | |
| x_mitre_platforms | Google Workspace | |
| x_mitre_platforms | Office 365 |
| Description |
|---|
| Events collected by third-party services such as mail servers, web applications, or other appliances (not by the native OS or platform)(Citation: Confluence Logs) |
Details
Values Changed
| Field | Old value | New value |
|---|---|---|
| modified | 2022-05-11T14:00:00.188Z | 2024-10-14T22:11:30.271Z |
Iterable Item Added
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Office Suite |
Iterable Item Removed
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Google Workspace | |
| x_mitre_platforms | Office 365 |
| Description |
|---|
| A network security system, running locally on an endpoint or remotely as a service (ex: cloud environment), that monitors and controls incoming/outgoing network traffic based on predefined rules(Citation: AWS Sec Groups VPC) |
Details
Values Changed
| Field | Old value | New value |
|---|---|---|
| modified | 2022-03-30T14:26:51.805Z | 2024-10-14T22:11:30.271Z |
Iterable Item Added
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Office Suite | |
| x_mitre_platforms | Identity Provider |
Iterable Item Removed
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Azure AD | |
| x_mitre_platforms | Google Workspace | |
| x_mitre_platforms | Office 365 |
| Description |
|---|
| Infrastructure, platforms, or software that are hosted on-premise or by third-party providers, made available to users through network connections and/or APIs(Citation: Amazon AWS)(Citation: Azure Products) |
Details
Values Changed
| Field | Old value | New value |
|---|---|---|
| modified | 2022-03-30T14:26:51.804Z | 2024-10-14T22:11:30.271Z |
| x_mitre_platforms[3] | Office 365 | Identity Provider |
Iterable Item Added
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Office Suite |
Iterable Item Removed
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Azure AD | |
| x_mitre_platforms | Google Workspace |
| Description |
|---|
| A database and set of services that allows administrators to manage permissions, access to network resources, and stored data objects (user, group, application, or devices)(Citation: Microsoft AD DS Getting Started) |
Details
Values Changed
| Field | Old value | New value |
|---|---|---|
| modified | 2022-03-30T14:26:51.803Z | 2024-10-14T22:11:30.271Z |
Iterable Item Added
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Identity Provider |
Iterable Item Removed
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Azure AD |
| Description |
|---|
| Logon occurring on a system or resource (local, domain, or cloud) to which a user/device is gaining access after successful authentication and authorization(Citation: Microsoft Audit Logon Events) |
Details
Values Changed
| Field | Old value | New value |
|---|---|---|
| modified | 2022-12-07T19:45:09.019Z | 2024-10-14T22:11:30.271Z |
Iterable Item Added
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Office Suite | |
| x_mitre_platforms | Identity Provider |
Iterable Item Removed
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Azure AD | |
| x_mitre_platforms | Google Workspace | |
| x_mitre_platforms | Office 365 |
| Description |
|---|
| A collection of multiple user accounts that share the same access rights to the computer and/or network resources and have common security rights(Citation: Amazon IAM Groups) |
Details
Values Changed
| Field | Old value | New value |
|---|---|---|
| modified | 2022-03-30T14:26:51.805Z | 2024-10-14T22:11:30.271Z |
| x_mitre_platforms[3] | Office 365 | Office Suite |
Iterable Item Added
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Identity Provider |
Iterable Item Removed
| Field | Old value | New value |
|---|---|---|
| x_mitre_platforms | Azure AD | |
| x_mitre_platforms | Google Workspace |