M365 DEF-SecScore-E3 Mappings

Microsoft Secure Score recommendations can protect your organization from threats. Secure Score helps organizations: report on the current state of the organization's security posture; improve their security posture by providing discoverability, visibility, guidance, and control; and compare with benchmarks and establish key performance indicators (KPIs).

Mappings

Capability ID	Capability Description	Mapping Type	ATT&CK ID	ATT&CK Name
DEF-SecScore-E3	Secure Score	Technique Scores	T1137	Office Application Startup
DEF-SecScore-E3	Secure Score	Technique Scores	T1072	Software Deployment Tools
DEF-SecScore-E3	Secure Score	Technique Scores	T1550	Use Alternate Authentication Material
DEF-SecScore-E3	Secure Score	Technique Scores	T1530	Data from Cloud Storage
DEF-SecScore-E3	Secure Score	Technique Scores	T1213	Data from Information Repositories
DEF-SecScore-E3	Secure Score	Technique Scores	T1213.002	Sharepoint
DEF-SecScore-E3	Secure Score	Technique Scores	T1078.001	Default Accounts
DEF-SecScore-E3	Secure Score	Technique Scores	T1656	Impersonation
DEF-SecScore-E3	Secure Score	Technique Scores	T1021	Remote Services
DEF-SecScore-E3	Secure Score	Technique Scores	T1566.001	Spearphishing Attachment
DEF-SecScore-E3	Secure Score	Technique Scores	T1566.002	Spearphishing Link
DEF-SecScore-E3	Secure Score	Technique Scores	T1566	Phishing
DEF-SecScore-E3	Secure Score	Technique Scores	T1080	Taint Shared Content
DEF-SecScore-E3	Secure Score	Technique Scores	T1546	Event Triggered Execution
DEF-SecScore-E3	Secure Score	Technique Scores	T1204.001	Malicious Link
DEF-SecScore-E3	Secure Score	Technique Scores	T1204.002	Malicious File
DEF-SecScore-E3	Secure Score	Technique Scores	T1204	User Execution
DEF-SecScore-E3	Secure Score	Technique Scores	T1189	Drive-by Compromise
DEF-SecScore-E3	Secure Score	Technique Scores	T1114.002	Remote Email Collection
DEF-SecScore-E3	Secure Score	Technique Scores	T1114.003	Email Forwarding Rule
DEF-SecScore-E3	Secure Score	Technique Scores	T1114	Email Collection
DEF-SecScore-E3	Secure Score	Technique Scores	T1059.009	Cloud API
DEF-SecScore-E3	Secure Score	Technique Scores	T1021.007	Cloud Services
DEF-SecScore-E3	Secure Score	Technique Scores	T1136	Create Account
DEF-SecScore-E3	Secure Score	Technique Scores	T1136.003	Cloud Account
DEF-SecScore-E3	Secure Score	Technique Scores	T1548	Abuse Elevation Control Mechanism
DEF-SecScore-E3	Secure Score	Technique Scores	T1651	Cloud Administration Command
DEF-SecScore-E3	Secure Score	Technique Scores	T1606	Forge Web Credentials
DEF-SecScore-E3	Secure Score	Technique Scores	T1564	Hide Artifacts
DEF-SecScore-E3	Secure Score	Technique Scores	T1657	Financial Theft
DEF-SecScore-E3	Secure Score	Technique Scores	T1567.004	Exfiltration Over Webhook
DEF-SecScore-E3	Secure Score	Technique Scores	T1564.008	Email Hiding Rules
DEF-SecScore-E3	Secure Score	Technique Scores	T1110.004	Credential Stuffing
DEF-SecScore-E3	Secure Score	Technique Scores	T1110.003	Password Spraying
DEF-SecScore-E3	Secure Score	Technique Scores	T1110.002	Password Cracking
DEF-SecScore-E3	Secure Score	Technique Scores	T1110.001	Password Guessing
DEF-SecScore-E3	Secure Score	Technique Scores	T1110	Brute Force
DEF-SecScore-E3	Secure Score	Technique Scores	T1211	Exploitation for Defense Evasion
DEF-SecScore-E3	Secure Score	Technique Scores	T1562.008	Disable or Modify Cloud Logs
DEF-SecScore-E3	Secure Score	Technique Scores	T1562	Impair Defenses
DEF-SecScore-E3	Secure Score	Technique Scores	T1534	Internal Spearphishing
DEF-SecScore-E3	Secure Score	Technique Scores	T1078	Valid Accounts
DEF-SecScore-E3	Secure Score	Technique Scores	T1078.004	Cloud Accounts
DEF-SecScore-E3	Secure Score	Technique Scores	T1550	Use Alternate Authentication Material
DEF-SecScore-E3	Secure Score	Technique Scores	T1550.001	Application Access Token
DEF-SecScore-E3	Secure Score	Technique Scores	T1114.002	Remote Email Collection
DEF-SecScore-E3	Secure Score	Technique Scores	T1114.003	Email Forwarding Rule
DEF-SecScore-E3	Secure Score	Technique Scores	T1567.002	Exfiltration to Cloud Storage
DEF-SecScore-E3	Secure Score	Technique Scores	T1567	Exfiltration Over Web Service