SC-4Information in Shared System Resources

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (29)

• T1020.001 Traffic Duplication Exfiltration
• T1040 Network Sniffing Credential Access, Discovery
• T1070 Indicator Removal Stealth
• T1070.008 Clear Mailbox Data Stealth
• T1080 Taint Shared Content Lateral Movement
• T1119 Automated Collection Collection
• T1530 Data from Cloud Storage Collection
• T1552 Unsecured Credentials Credential Access
• T1552.001 Credentials In Files Credential Access
• T1552.002 Credentials in Registry Credential Access
• T1552.004 Private Keys Credential Access
• T1557 Adversary-in-the-Middle Credential Access, Collection
• T1557.002 ARP Cache Poisoning Credential Access, Collection
• T1558 Steal or Forge Kerberos Tickets Credential Access
• T1558.002 Silver Ticket Credential Access
• T1558.003 Kerberoasting Credential Access
• T1558.004 AS-REP Roasting Credential Access
• T1558.005 Ccache Files Credential Access
• T1564.009 Resource Forking Stealth
• T1565 Data Manipulation Impact
• T1565.001 Stored Data Manipulation Impact
• T1565.002 Transmitted Data Manipulation Impact
• T1565.003 Runtime Data Manipulation Impact
• T1595.003 Wordlist Scanning Reconnaissance
• T1602 Data from Configuration Repository Collection
• T1602.001 SNMP (MIB Dump) Collection
• T1602.002 Network Device Configuration Dump Collection
• T1685.005 Clear Windows Event Logs Defense Impairment
• T1685.006 Clear Linux or Mac System Logs Defense Impairment

Weaknesses this control addresses (5)AI

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family SC