AC-7Unsuccessful Logon Attempts

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (16)

• T1021 Remote Services Lateral Movement
• T1021.001 Remote Desktop Protocol Lateral Movement
• T1021.004 SSH Lateral Movement
• T1078.002 Domain Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1078.004 Cloud Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1110 Brute Force Credential Access
• T1110.001 Password Guessing Credential Access
• T1110.002 Password Cracking Credential Access
• T1110.003 Password Spraying Credential Access
• T1110.004 Credential Stuffing Credential Access
• T1133 External Remote Services Persistence, Initial Access
• T1530 Data from Cloud Storage Collection
• T1556 Modify Authentication Process Defense Impairment, Persistence, Credential Access
• T1556.001 Domain Controller Authentication Defense Impairment, Persistence, Credential Access
• T1556.003 Pluggable Authentication Modules Defense Impairment, Persistence, Credential Access
• T1556.004 Network Device Authentication Defense Impairment, Persistence, Credential Access

Weaknesses this control addresses (1)AI-assisted

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family AC