M365 ME-PWP-E3 Mappings

Password policies are applied to all user accounts that are created and managed directly in Microsoft Entra ID. There's a password policy that defines settings like the password complexity, length, or age. There's also a policy that defines acceptable characters and length for usernames.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
ME-PWP-E3 Password Policy Technique Scores T1586.003 Cloud Accounts
ME-PWP-E3 Password Policy Technique Scores T1110.004 Credential Stuffing
ME-PWP-E3 Password Policy Technique Scores T1110.003 Password Spraying
ME-PWP-E3 Password Policy Technique Scores T1110.002 Password Cracking
ME-PWP-E3 Password Policy Technique Scores T1110.001 Password Guessing
ME-PWP-E3 Password Policy Technique Scores T1078 Valid Accounts
ME-PWP-E3 Password Policy Technique Scores T1110 Brute Force