AC-16Security and Privacy Attributes

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (57)

• T1003 OS Credential Dumping Credential Access
• T1003.003 NTDS Credential Access
• T1005 Data from Local System Collection
• T1020.001 Traffic Duplication Exfiltration
• T1025 Data from Removable Media Collection
• T1040 Network Sniffing Credential Access, Discovery
• T1041 Exfiltration Over C2 Channel Exfiltration
• T1048 Exfiltration Over Alternative Protocol Exfiltration
• T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol Exfiltration
• T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol Exfiltration
• T1052 Exfiltration Over Physical Medium Exfiltration
• T1052.001 Exfiltration over USB Exfiltration
• T1070 Indicator Removal Stealth
• T1070.008 Clear Mailbox Data Stealth
• T1114 Email Collection Collection
• T1114.001 Local Email Collection Collection
• T1114.002 Remote Email Collection Collection
• T1114.003 Email Forwarding Rule Collection
• T1119 Automated Collection Collection
• T1213 Data from Information Repositories Collection
• T1213.001 Confluence Collection
• T1213.002 Sharepoint Collection
• T1213.004 Customer Relationship Management Software Collection
• T1213.005 Messaging Applications Collection
• T1222 File and Directory Permissions Modification Defense Impairment
• T1222.001 Windows Permissions Defense Impairment
• T1222.002 Linux and Mac Permissions Defense Impairment
• T1505 Server Software Component Persistence
• T1505.002 Transport Agent Persistence
• T1530 Data from Cloud Storage Collection
• T1537 Transfer Data to Cloud Account Exfiltration
• T1547.007 Re-opened Applications Persistence, Privilege Escalation
• T1548 Abuse Elevation Control Mechanism Privilege Escalation
• T1548.003 Sudo and Sudo Caching Privilege Escalation
• T1548.006 TCC Manipulation Privilege Escalation
• T1550.001 Application Access Token Lateral Movement
• T1552 Unsecured Credentials Credential Access
• T1552.004 Private Keys Credential Access
• T1552.005 Cloud Instance Metadata API Credential Access
• T1556.009 Conditional Access Policies Defense Impairment, Persistence, Credential Access
• T1557 Adversary-in-the-Middle Credential Access, Collection
• T1557.002 ARP Cache Poisoning Credential Access, Collection
• T1558 Steal or Forge Kerberos Tickets Credential Access
• T1558.002 Silver Ticket Credential Access
• T1558.003 Kerberoasting Credential Access
• T1558.004 AS-REP Roasting Credential Access
• T1564.004 NTFS File Attributes Stealth
• T1565 Data Manipulation Impact
• T1565.001 Stored Data Manipulation Impact
• T1565.002 Transmitted Data Manipulation Impact

Weaknesses this control addresses (8)AI-assisted

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family AC