Case :UB6.C3 Generate tokensUB6.C4.K1 Users authenticate with SMSProtection : UB6.C3.P1 Use tokens with short lifespans or implement token rotation strategies.UB6.C3.P2 Implement a process to detect and revoke compromised tokens as…
Case :UB1.C7 Email Delegate permissionsProtection : UB1.C7.P1 – Audit MailboxesUB1.C7.P2 – Block/Disable permission delegation feature or require on-demand approvalThreat : UB1.C7.T1 – Unauthorised user access to restricted or sensitive information…
Case – UB1.C6 Remove EmailsThreat – UB1.C6.T1 – Lost of email non-reputation evidenceK –KQL Queries – UB7.C1.K1.T1 Data leakageKnown interaction – (Users) UB3.C2.K2 – Sign-in on non-owner devicesThreat- UB3.C2.K2.T1 –…
Sergio Albea