SC-18Mobile Code

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (38)

• T1021.003 Distributed Component Object Model Lateral Movement
• T1055 Process Injection Stealth, Privilege Escalation
• T1055.001 Dynamic-link Library Injection Stealth, Privilege Escalation
• T1055.002 Portable Executable Injection Stealth, Privilege Escalation
• T1055.003 Thread Execution Hijacking Stealth, Privilege Escalation
• T1055.004 Asynchronous Procedure Call Stealth, Privilege Escalation
• T1055.005 Thread Local Storage Stealth, Privilege Escalation
• T1055.008 Ptrace System Calls Stealth, Privilege Escalation
• T1055.009 Proc Memory Stealth, Privilege Escalation
• T1055.011 Extra Window Memory Injection Stealth, Privilege Escalation
• T1055.012 Process Hollowing Stealth, Privilege Escalation
• T1055.013 Process Doppelgänging Stealth, Privilege Escalation
• T1055.014 VDSO Hijacking Stealth, Privilege Escalation
• T1059 Command and Scripting Interpreter Execution
• T1059.005 Visual Basic Execution
• T1059.007 JavaScript Execution
• T1068 Exploitation for Privilege Escalation Privilege Escalation
• T1127.002 ClickOnce Stealth, Execution
• T1137 Office Application Startup Persistence
• T1137.001 Office Template Macros Persistence
• T1137.002 Office Test Persistence
• T1137.003 Outlook Forms Persistence
• T1137.004 Outlook Home Page Persistence
• T1137.005 Outlook Rules Persistence
• T1137.006 Add-ins Persistence
• T1189 Drive-by Compromise Initial Access
• T1190 Exploit Public-Facing Application Initial Access
• T1203 Exploitation for Client Execution Execution
• T1210 Exploitation of Remote Services Lateral Movement
• T1211 Exploitation for Stealth Stealth
• T1212 Exploitation for Credential Access Credential Access
• T1218.001 Compiled HTML File Stealth
• T1218.015 Electron Applications Stealth
• T1548 Abuse Elevation Control Mechanism Privilege Escalation
• T1548.004 Elevated Execution with Prompt Privilege Escalation
• T1559 Inter-Process Communication Execution
• T1559.001 Component Object Model Execution
• T1559.002 Dynamic Data Exchange Execution

Weaknesses this control addresses (5)AI-assisted

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family SC