ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CVE
Google Cloud Platform (GCP)
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 8.2 Enterprise and Azure 06.29.2021.
Change versions here.
Home
Mapping Frameworks
Azure Home
Azure Security Center Recommendations
Azure
azure_security_center_recommendations
Mappings
This feature of Azure Security Center assesses your workloads and raises threat prevention recommendations and security alerts.
Mappings
ATT&CK Version
8.2
ATT&CK Domain
Enterprise
Azure
06.29.2021
Change Versions
Capability ID
Capability Description
Category
Value
ATT&CK ID
ATT&CK Name
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1040
Network Sniffing
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1190
Exploit Public-Facing Application
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1110
Brute Force
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1110.001
Password Guessing
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1110.003
Password Spraying
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1110.004
Credential Stuffing
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1542
Pre-OS Boot
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1542.001
System Firmware
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1542.003
Bootkit
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1499
Endpoint Denial of Service
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1499.001
OS Exhaustion Flood
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1525
Implant Container Image
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1068
Exploitation for Privilege Escalation
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1098
Account Manipulation
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1098.004
SSH Authorized Keys
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1554
Compromise Client Software Binary
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1136
Create Account
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1136.001
Local Account
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1543
Create or Modify System Process
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1543.002
Systemd Service
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1546
Event Triggered Execution
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1546.004
.bash_profile and .bashrc
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1505
Server Software Component
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1505.003
Web Shell
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1222
File and Directory Permissions Modification
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1222.002
Linux and Mac File and Directory Permissions Modification
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1564
Hide Artifacts
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1564.001
Hidden Files and Directories
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1564.005
Hidden File System
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1564.006
Run Virtual Instance
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1053
Scheduled Task/Job
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1053.003
Cron
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1053.006
Systemd Timers
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1556
Modify Authentication Process
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1556.003
Pluggable Authentication Modules
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1080
Taint Shared Content
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1074
Data Staged
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1074.001
Local Data Staging
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1485
Data Destruction
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1486
Data Encrypted for Impact
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1565
Data Manipulation
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1565.001
Stored Data Manipulation
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1078
Valid Accounts
azure_security_center_recommendations
Azure Security Center Recommendations
protect
minimal
T1078.004
Cloud Accounts
azure_security_center_recommendations
Azure Security Center Recommendations
protect
partial
T1133
External Remote Services