ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CSA Cloud Controls Matrix (CCM)
CRI Profile
Known Exploited Vulnerabilities
Google Cloud Platform (GCP)
Intel vPro
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 12.1 Enterprise and NIST 800-53 rev5.
Change versions here.
Home
Mapping Frameworks
NIST 800-53 Home
Incident Response Capability Group
NIST 800-53
Incident Response
Capability Group
All Mappings
ATT&CK Version
12.1
ATT&CK Domain
Enterprise
NIST 800-53
rev5
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
IR-5
Incident Monitoring
Protects
T1564.008
Email Hiding Rules
Capabilities
ATT&CK Version
12.1
ATT&CK Domain
Enterprise
NIST 800-53
rev5
Change Versions
Capability ID
Capability Name
Number of Mappings
IR-5
Incident Monitoring
1