NIST SP 800-53 rev5 · Access Control
AC-23 Data Mining Protection
Mitigates 15 ATT&CK techniques, used by 10 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Techniques it mitigates
- T1005Data from Local System221 users
- T1041Exfiltration Over C2 Channel201 users
- T1048.003Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted Non-C2 Protocol33 users
- T1025Data from Removable Media24 users
- T1567Exfiltration Over Web Service14 users
- T1213.002Data from Information Repositories: Sharepoint10 users
- T1048Exfiltration Over Alternative Protocol9 users
- T1048.002Exfiltration Over Alternative Protocol: Exfiltration Over Asymmetric Encrypted Non-C2 Protocol8 users
- T1052.001Exfiltration Over Physical Medium: Exfiltration over USB7 users
- T1213.005Data from Information Repositories: Messaging Applications6 users
- T1213Data from Information Repositories4 users
- T1552.007Unsecured Credentials: Container API3 users
- T1213.001Data from Information Repositories: Confluence2 users
- T1052Exfiltration Over Physical Medium0 users
- T1213.004Data from Information Repositories: Customer Relationship Management Software0 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.