M365 PUR-PAM-E5 Mappings

Microsoft Purview Privileged Access Management allows granular access control over privileged admin tasks in Office 365. It can help protect your organization from breaches that use existing privileged admin accounts with standing access to sensitive data or access to critical configuration settings.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
PUR-PAM-E5 Privileged Access Management Technique Scores T1586.003 Cloud Accounts
PUR-PAM-E5 Privileged Access Management Technique Scores T1078.001 Default Accounts
PUR-PAM-E5 Privileged Access Management Technique Scores T1078 Valid Accounts
PUR-PAM-E5 Privileged Access Management Technique Scores T1133 External Remote Services
PUR-PAM-E5 Privileged Access Management Technique Scores T1213 Data from Information Repositories
PUR-PAM-E5 Privileged Access Management Technique Scores T1213.002 Sharepoint
PUR-PAM-E5 Privileged Access Management Technique Scores T1530 Data from Cloud Storage
PUR-PAM-E5 Privileged Access Management Technique Scores T1059 Command and Scripting Interpreter
PUR-PAM-E5 Privileged Access Management Technique Scores T1059.009 Cloud API
PUR-PAM-E5 Privileged Access Management Technique Scores T1651 Cloud Administration Command
PUR-PAM-E5 Privileged Access Management Technique Scores T1098.001 Additional Cloud Credentials
PUR-PAM-E5 Privileged Access Management Technique Scores T1098.003 Additional Cloud Roles
PUR-PAM-E5 Privileged Access Management Technique Scores T1098 Account Manipulation