MITRE ATT&CK Mitigation

M1002: Attestation

Enable remote attestation capabilities when available (such as Android SafetyNet or Samsung Knox TIMA Attestation) and prohibit devices that fail the attestation from accessing enterprise resources.

▪Techniques addressed (13)

T1404Exploitation for Privilege Escalation T1634Credentials from Password Store T1617Hooking T1623.001Unix Shell T1634.001Keychain T1398Boot or Logon Initialization Scripts T1623Command and Scripting Interpreter T1424Process Discovery T1625Hijack Execution Flow T1645Compromise Client Software Binary T1625.001System Runtime API Hijacking T1630Indicator Removal on Host T1630.001Uninstall Malicious Application

▪Reference

M1002on MITRE ATT&CK

MITRE ATT&CK Mitigation

M1002: Attestation

ShareX LinkedIn Reddit HN

Enable remote attestation capabilities when available (such as Android SafetyNet or Samsung Knox TIMA Attestation) and prohibit devices that fail the attestation from accessing enterprise resources.

▪Techniques addressed (13)

▪Reference

M1002on MITRE ATT&CK

M1002: Attestation

▪Techniques addressed (13)

▪Reference

Explore Gold

Security Data & Tools

Products

Use Cases

Company

M1002: Attestation

▪Techniques addressed (13)

▪Reference