Azure Azure DNS Alias Records Capability Group

All Mappings

Capability ID Capability Description Category Value ATT&CK ID ATT&CK Name Notes
azure_dns_alias_records Azure DNS Alias Records protect minimal T1584 Compromise Infrastructure
Comments
This control only provides protection for one of this technique's sub-techniques while not providing any protection for the remaining and therefore its coverage score factor is Minimal, resulting in a Minimal score.
References
azure_dns_alias_records Azure DNS Alias Records protect partial T1584.001 Domains
Comments
Alias records prevent dangling references by tightly coupling the life cycle of a DNS record with an Azure resource. For example, consider a DNS record that's qualified as an alias record to point to a public IP address or a Traffic Manager profile. If you delete those underlying resources, the DNS alias record becomes an empty record set. It no longer references the deleted resource. This control is effective for protecting DNS records that resolve to Azure resources but does not offer protection for records pointing to non-Azure resources, resulting in a Partial score.
References

    Capabilities

    Capability ID Capability Name Number of Mappings
    azure_dns_alias_records Azure DNS Alias Records 2