Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| Microsoft AD Accounts | Microsoft. (2019, August 23). Active Directory Accounts. Retrieved March 13, 2020. |
| Microsoft AD Admin Tier Model | Microsoft. (2019, February 14). Active Directory administrative tier model. Retrieved February 21, 2020. |
| Microsoft AD CS Overview | Microsoft. (2016, August 31). Active Directory Certificate Services Overview. Retrieved August 2, 2022. |
| Microsoft ADS Mar 2014 | Marlin, J. (2013, March 24). Alternate Data Streams in NTFS. Retrieved March 21, 2018. |
| Microsoft ADV170021 Dec 2017 | Microsoft. (2017, December 12). ADV170021 - Microsoft Office Defense in Depth Update. Retrieved February 3, 2018. |
| Microsoft APC | Microsoft. (n.d.). Asynchronous Procedure Calls. Retrieved December 8, 2017. |
| Microsoft AZ CLI | Microsoft. (n.d.). az ad user. Retrieved October 6, 2019. |
| Microsoft About BITS | Microsoft. (2019, July 12). About BITS. Retrieved March 16, 2020. |
| Microsoft About Profiles | Microsoft. (2017, November 29). About Profiles. Retrieved June 14, 2019. |
| Microsoft Access Control Lists May 2018 | M. Satran, M. Jacobs. (2018, May 30). Access Control Lists. Retrieved February 4, 2020. |
| Microsoft Actinium February 2022 | Microsoft Threat Intelligence Center. (2022, February 4). ACTINIUM targets Ukrainian organizations. Retrieved February 18, 2022. |
| Microsoft AddPrintProcessor May 2018 | Microsoft. (2018, May 31). AddPrintProcessor function. Retrieved October 5, 2020. |
| Microsoft Admin Shares | Microsoft. (n.d.). How to create and delete hidden or administrative shares on client computers. Retrieved November 20, 2014. |
| Microsoft Adv Security Settings | Microsoft. (n.d.). Retrieved April 15, 2026. |
| Microsoft Albanian Government Attacks September 2022 | MSTIC. (2022, September 8). Microsoft investigates Iranian attacks against the Albanian government. Retrieved August 6, 2024. |
| Microsoft AlwaysInstallElevated 2018 | Microsoft. (2018, May 31). AlwaysInstallElevated. Retrieved December 14, 2020. |
| Microsoft Analyzing Solorigate Dec 2020 | MSTIC. (2020, December 18). Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers . Retrieved January 5, 2021. |
| Microsoft App Domains | Microsoft. (2021, September 15). Application domains. Retrieved March 28, 2024. |
| Microsoft AssemblyLoad | Microsoft. (n.d.). Assembly.Load Method. Retrieved February 9, 2024. |
| Microsoft Assoc Oct 2017 | Plett, C. et al.. (2017, October 15). assoc. Retrieved August 7, 2018. |
| Microsoft Atom Table | Microsoft. (n.d.). About Atom Tables. Retrieved December 8, 2017. |
| Microsoft Audit Policy | Microsoft. (n.d.). Retrieved April 15, 2026. |
| Microsoft Authenticode | Microsoft. (n.d.). Authenticode. Retrieved January 31, 2018. |
| Microsoft Azure AD Users | Microsoft. (2019, November 11). Add or delete users using Azure Active Directory. Retrieved January 30, 2020. |
| Microsoft Azure Instance Metadata 2021 | Microsoft. (2021, February 21). Azure Instance Metadata Service (Windows). Retrieved April 2, 2021. |
| Microsoft Azure Key Vault | Microsoft. (2023, January 13). Quickstart: Set and retrieve a secret from Azure Key Vault using Azure CLI. Retrieved September 25, 2023. |
| Microsoft Azure Kubernetes Service Service Accounts | Microsoft Azure. (2023, April 28). Access and identity options for Azure Kubernetes Service (AKS). Retrieved July 14, 2023. |
| Microsoft Azure Policy | Microsoft. (2023, August 30). Azure Policy built-in policy definitions. Retrieved September 5, 2023. |
| Microsoft Azure Resources | Microsoft Azure. (2024, May 31). Organize your Azure resources effectively. Retrieved September 25, 2024. |
| Microsoft Azure Storage Security, 2019 | Amlekar, M., Brooks, C., Claman, L., et. al.. (2019, March 20). Azure Storage security guide. Retrieved October 4, 2019. |
| Microsoft Azure Storage Shared Access Signature | Microsoft. (2023, June 7). Grant limited access to Azure Storage resources using shared access signatures (SAS). Retrieved March 4, 2024. |
| Microsoft Azure Virtual Network Overview | Annamalai, N., Casey, C., Almeida, M., et. al.. (2019, June 18). What is Azure Virtual Network?. Retrieved October 6, 2019. |
| Microsoft BITS | Microsoft. (n.d.). Background Intelligent Transfer Service. Retrieved January 12, 2018. |
| Microsoft BITSAdmin | Microsoft. (n.d.). BITSAdmin Tool. Retrieved January 12, 2018. |
| Microsoft Basic TxF Concepts | Microsoft. (n.d.). Basic TxF Concepts. Retrieved December 20, 2017. |
| Microsoft BlackByte 2023 | Microsoft Incident Response. (2023, July 6). The five-day job: A BlackByte ransomware intrusion case study. Retrieved December 16, 2024. |
| Microsoft BlackCat Jun 2022 | Microsoft Defender Threat Intelligence. (2022, June 13). The many lives of BlackCat ransomware. Retrieved December 20, 2022. |
| Microsoft CLR Integration 2017 | Microsoft. (2017, June 19). Common Language Runtime Integration. Retrieved July 8, 2019. |
| Microsoft COM | Microsoft. (n.d.). Component Object Model (COM). Retrieved November 22, 2017. |
| Microsoft COM ACL | Microsoft. (n.d.). DCOM Security Enhancements in Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1. Retrieved November 22, 2017. |
| Microsoft COR_PROFILER Feb 2013 | Microsoft. (2013, February 4). Registry-Free Profiler Startup and Attach. Retrieved June 24, 2020. |
| Microsoft CVE-2017-8625 Aug 2017 | Microsoft. (2017, August 8). CVE-2017-8625 - Internet Explorer Security Feature Bypass Vulnerability. Retrieved October 3, 2018. |
| Microsoft CVE-2021-1732 Feb 2021 | Microsoft. (2018, February 9). Windows Win32k Elevation of Privilege Vulnerability CVE-2021-1732. Retrieved June 1, 2022. |
| Microsoft Catalog Files and Signatures April 2017 | Hudek, T. (2017, April 20). Catalog Files and Digital Signatures. Retrieved January 31, 2018. |
| Microsoft Change Default Programs | Microsoft. (n.d.). Change which programs Windows 7 uses by default. Retrieved July 26, 2016. |
| Microsoft Change Normal Template | Microsoft. (n.d.). Change the Normal template (Normal.dotm). Retrieved July 3, 2017. |
| Microsoft Cloud App Security | Niv Goldenberg. (2018, December 12). Rule your inbox with Microsoft Cloud App Security. Retrieved June 7, 2021. |
| Microsoft Component Object Model | Microsoft. (n.d.). The Component Object Model. Retrieved August 18, 2016. |
| Microsoft Conditional Access | Microsoft. (2023, November 15). What is Conditional Access?. Retrieved January 2, 2024. |
| Microsoft Connection Manager Oct 2009 | Microsoft. (2009, October 8). How Connection Manager Works. Retrieved April 11, 2018. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
