Modeltechnique
D3-AMAccess Modeling
Access Modeling
Definition
Access modeling captures and records the access permissions granted to identities (e.g., administrators, users, groups, systems) and optionally includes details on how these identities are stored, managed, and shared across systems.
Defends against24
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Technique | Account Manipulationt1098 | 100% | live |
| SubTechnique | Group Policy Preferencest1552.006 | 100% | live |
| SubTechnique | Domain Accountst1078.002 | 100% | live |
| SubTechnique | Domain Accountt1136.002 | 100% | live |
| Technique | Domain Policy Modificationt1484 | 100% | live |
| SubTechnique | Setuid and Setgidt1548.001 | 100% | live |
| SubTechnique | Cloud Accountst1078.004 | 100% | live |
| Technique | Create Accountt1136 | 100% | live |
| SubTechnique | Default Accountst1078.001 | 100% | live |
| SubTechnique | Additional Email Delegate Permissionst1098.002 | 100% | live |
| SubTechnique | Cloud Accountt1136.003 | 100% | live |
| Technique | t1556.009 | 100% | live |
| SubTechnique | Additional Cloud Rolest1098.003 | 100% | live |
| SubTechnique | Domain Accountt1087.002 | 100% | live |
| SubTechnique | Temporary Elevated Cloud Accesst1548.005 | 100% | live |
| SubTechnique | Cloud Accountt1087.004 | 100% | live |
| Technique | Group Policy Discoveryt1615 | 100% | live |
| SubTechnique | Local Accountst1078.003 | 100% | live |
| SubTechnique | SID-History Injectiont1134.005 | 100% | live |
| Technique | Account Access Removalt1531 | 100% | live |
| Technique | Valid Accountst1078 | 100% | live |
| Technique | File and Directory Permissions Modificationt1222 | 100% | live |
| SubTechnique | Local Accountt1087.001 | 100% | live |
| SubTechnique | Local Accountt1136.001 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.