Azure Advanced Threat Protection for Azure SQL Database Capability Group

All Mappings

Capability ID	Capability Description	Category	Value	ATT&CK ID	ATT&CK Name
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	detect	minimal	T1078	Valid Accounts
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	detect	partial	T1078.004	Cloud Accounts
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	detect	minimal	T1213	Data from Information Repositories
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	detect	minimal	T1110	Brute Force
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	detect	minimal	T1110.001	Password Guessing
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	detect	minimal	T1110.003	Password Spraying
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	detect	minimal	T1110.004	Credential Stuffing
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	detect	minimal	T1190	Exploit Public-Facing Application

Capability ID	Capability Name	Number of Mappings
advanced_threat_protection_for_azure_sql_database	Advanced Threat Protection for Azure SQL Database	8