SC-3Security Function Isolation

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (18)

• T1003.001 LSASS Memory Credential Access
• T1021.003 Distributed Component Object Model Lateral Movement
• T1047 Windows Management Instrumentation Execution
• T1068 Exploitation for Privilege Escalation Privilege Escalation
• T1134.005 SID-History Injection Stealth, Privilege Escalation
• T1189 Drive-by Compromise Initial Access
• T1190 Exploit Public-Facing Application Initial Access
• T1203 Exploitation for Client Execution Execution
• T1210 Exploitation of Remote Services Lateral Movement
• T1211 Exploitation for Stealth Stealth
• T1212 Exploitation for Credential Access Credential Access
• T1559 Inter-Process Communication Execution
• T1559.001 Component Object Model Execution
• T1559.002 Dynamic Data Exchange Execution
• T1602 Data from Configuration Repository Collection
• T1602.001 SNMP (MIB Dump) Collection
• T1602.002 Network Device Configuration Dump Collection
• T1611 Escape to Host Privilege Escalation

Weaknesses this control addresses (6)AI-assisted

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family SC