1. Home
  2. Mapping Frameworks
  3. M365 Home
  4. Conditional Access Evaluation

M365 ME-CAE-E3 Mappings

Continuous access evaluation proactively terminates active user sessions and enforces tenant policy changes in near real time instead of relying on access token expiration. Microsoft Entra ID notifies continuous access evaluation-enabled Microsoft 365 services (such as SharePoint, Teams, and Exchange) when the user account or tenant has changed in a way that requires reevaluation of the user account's authentication state.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1556.006 Multi-Factor Authentication
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1134.001 Token Impersonation/Theft
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1098.006 Additional Container Cluster Roles
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1098.003 Additional Cloud Roles
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1548.005 Temporary Elevated Cloud Access
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1110 Brute Force
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1585.003 Cloud Accounts
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1585.002 Email Accounts
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1585 Establish Accounts
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1651 Cloud Administration Command
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1114 Email Collection
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1114.002 Remote Email Collection
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1586.003 Cloud Accounts
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1586.002 Email Accounts
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1586 Compromise Accounts
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1531 Account Access Removal
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1586.003 Cloud Accounts
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1078 Valid Accounts
ME-CAE-E3 Conditional Access Evaluation Technique Scores T1539 Steal Web Session Cookie