SI-16Memory Protection

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (36)

• T1003.001 LSASS Memory Credential Access
• T1047 Windows Management Instrumentation Execution
• T1055.009 Proc Memory Stealth, Privilege Escalation
• T1059 Command and Scripting Interpreter Execution
• T1059.001 PowerShell Execution
• T1059.002 AppleScript Execution
• T1059.003 Windows Command Shell Execution
• T1059.004 Unix Shell Execution
• T1059.005 Visual Basic Execution
• T1059.006 Python Execution
• T1059.007 JavaScript Execution
• T1059.008 Network Device CLI Execution
• T1059.011 Lua Execution
• T1218 System Binary Proxy Execution Stealth
• T1218.001 Compiled HTML File Stealth
• T1218.002 Control Panel Stealth
• T1218.003 CMSTP Stealth
• T1218.004 InstallUtil Stealth
• T1218.005 Mshta Stealth
• T1218.008 Odbcconf Stealth
• T1218.009 Regsvcs/Regasm Stealth
• T1218.012 Verclsid Stealth
• T1218.013 Mavinject Stealth
• T1218.014 MMC Stealth
• T1218.015 Electron Applications Stealth
• T1505.004 IIS Components Persistence
• T1543 Create or Modify System Process Persistence, Privilege Escalation
• T1543.002 Systemd Service Persistence, Privilege Escalation
• T1547.004 Winlogon Helper DLL Persistence, Privilege Escalation
• T1547.006 Kernel Modules and Extensions Persistence, Privilege Escalation
• T1548 Abuse Elevation Control Mechanism Privilege Escalation
• T1548.004 Elevated Execution with Prompt Privilege Escalation
• T1565 Data Manipulation Impact
• T1565.001 Stored Data Manipulation Impact
• T1565.003 Runtime Data Manipulation Impact
• T1611 Escape to Host Privilege Escalation

Weaknesses this control addresses (5)AI-assisted

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family SI