SI-15Information Output Filtering

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (42)

• T1021.002 SMB/Windows Admin Shares Lateral Movement
• T1021.005 VNC Lateral Movement
• T1048 Exfiltration Over Alternative Protocol Exfiltration
• T1048.001 Exfiltration Over Symmetric Encrypted Non-C2 Protocol Exfiltration
• T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol Exfiltration
• T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol Exfiltration
• T1071.004 DNS Command And Control
• T1090 Proxy Command And Control
• T1090.003 Multi-hop Proxy Command And Control
• T1095 Non-Application Layer Protocol Command And Control
• T1187 Forced Authentication Credential Access
• T1197 BITS Jobs Stealth, Persistence, Execution
• T1205 Traffic Signaling Stealth, Persistence, Command And Control
• T1205.001 Port Knocking Stealth, Persistence, Command And Control
• T1218.012 Verclsid Stealth
• T1218.015 Electron Applications Stealth
• T1219 Remote Access Tools Command And Control
• T1498 Network Denial of Service Impact
• T1498.001 Direct Network Flood Impact
• T1498.002 Reflection Amplification Impact
• T1499 Endpoint Denial of Service Impact
• T1499.001 OS Exhaustion Flood Impact
• T1499.002 Service Exhaustion Flood Impact
• T1499.003 Application Exhaustion Flood Impact
• T1499.004 Application or System Exploitation Impact
• T1530 Data from Cloud Storage Collection
• T1537 Transfer Data to Cloud Account Exfiltration
• T1552 Unsecured Credentials Credential Access
• T1552.005 Cloud Instance Metadata API Credential Access
• T1557 Adversary-in-the-Middle Credential Access, Collection
• T1557.001 Name Resolution Poisoning and SMB Relay Credential Access, Collection
• T1557.002 ARP Cache Poisoning Credential Access, Collection
• T1557.003 DHCP Spoofing Credential Access, Collection
• T1564.009 Resource Forking Stealth
• T1570 Lateral Tool Transfer Lateral Movement
• T1572 Protocol Tunneling Command And Control
• T1599 Network Boundary Bridging Defense Impairment
• T1599.001 Network Address Translation Traversal Defense Impairment
• T1602 Data from Configuration Repository Collection
• T1602.001 SNMP (MIB Dump) Collection
• T1602.002 Network Device Configuration Dump Collection
• T1622 Debugger Evasion Stealth, Discovery

Weaknesses this control addresses (6)AI

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family SI