M365 ME-MFA-E3 Mappings

Microsoft Entra multi-factor authentication and Conditional Access policies give you the flexibility to require MFA from users for specific sign-in events. MFA is a process in which a user is prompted for additional forms of identification during a sign-in event.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
ME-MFA-E3 Multi-factor Authentication Technique Scores T1078.004 Cloud Accounts
ME-MFA-E3 Multi-factor Authentication Technique Scores T1136.003 Cloud Account
ME-MFA-E3 Multi-factor Authentication Technique Scores T1098.002 Additional Email Delegate Permissions
ME-MFA-E3 Multi-factor Authentication Technique Scores T1098.003 Additional Cloud Roles
ME-MFA-E3 Multi-factor Authentication Technique Scores T1098.001 Additional Cloud Credentials
ME-MFA-E3 Multi-factor Authentication Technique Scores T1098 Account Manipulation
ME-MFA-E3 Multi-factor Authentication Technique Scores T1110.004 Credential Stuffing
ME-MFA-E3 Multi-factor Authentication Technique Scores T1110.003 Password Spraying
ME-MFA-E3 Multi-factor Authentication Technique Scores T1110.002 Password Cracking
ME-MFA-E3 Multi-factor Authentication Technique Scores T1136.003 Cloud Account
ME-MFA-E3 Multi-factor Authentication Technique Scores T1110.001 Password Guessing
ME-MFA-E3 Multi-factor Authentication Technique Scores T1110 Brute Force
ME-MFA-E3 Multi-factor Authentication Technique Scores T1566.001 Spearphishing Attachment
ME-MFA-E3 Multi-factor Authentication Technique Scores T1566.002 Spearphishing Link
ME-MFA-E3 Multi-factor Authentication Technique Scores T1566 Phishing
ME-MFA-E3 Multi-factor Authentication Technique Scores T1530 Data from Cloud Storage