GCP advancedprotectionprogram Mappings

The Advanced Protection Program safeguards users with high visibility and sensitive information from targeted online attacks. Current capabilities include MFA, blocking harmful downloads while using chrome, and prevention of data requests from non-vetted apps. New protections are automatically added to defend against today’s wide range of threats.

Mappings

Capability ID Capability Description Category Value ATT&CK ID ATT&CK Name
advancedprotectionprogram AdvancedProtectionProgram protect significant T1098 Account Manipulation
advancedprotectionprogram AdvancedProtectionProgram protect significant T1110 Brute Force
advancedprotectionprogram AdvancedProtectionProgram protect significant T1136 Create Account
advancedprotectionprogram AdvancedProtectionProgram protect significant T1530 Data from Cloud Storage Object
advancedprotectionprogram AdvancedProtectionProgram protect significant T1114 Email Collection
advancedprotectionprogram AdvancedProtectionProgram protect significant T1133 External Remote Services
advancedprotectionprogram AdvancedProtectionProgram protect significant T1556 Modify Authentication Process
advancedprotectionprogram AdvancedProtectionProgram protect significant T1021 Remote Services
advancedprotectionprogram AdvancedProtectionProgram protect significant T1078.002 Domain Accounts
advancedprotectionprogram AdvancedProtectionProgram protect significant T1078.004 Cloud Accounts
advancedprotectionprogram AdvancedProtectionProgram protect significant T1110.001 Password Guessing
advancedprotectionprogram AdvancedProtectionProgram protect significant T1110.002 Password Cracking
advancedprotectionprogram AdvancedProtectionProgram protect significant T1110.003 Password Spraying
advancedprotectionprogram AdvancedProtectionProgram protect significant T1110.004 Credential Stuffing