ATT&CK ReferencesMandiant Remediation and Hardening Strategies for Microsoft 365

Mandiant Remediation and Hardening Strategies for Microsoft 365

Mandiant. (2022, August). Remediation and Hardening Strategies for Microsoft 365 to Defend Against APT29. Retrieved February 21, 2023.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1021.007 Cloud Services	GroupAPT29	APT29 has leveraged compromised high-privileged on-premises accounts synced to Office 365 to move laterally into a cloud environment, including through the use of Azure AD PowerShell. Mandiant Remediation and Hardening Strategies for Microsoft 365

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.