M1040ATT&CK 14.1

M1040Behavior Prevention on Endpoint

Description

Use capabilities to prevent suspicious behavior patterns from occurring on endpoint systems. This could include suspicious process, file, API call, etc. behavior.

References

  1. https://attack.mitre.org/mitigations/M1040

Compliance frameworks requiring this (incoming)26

TypeTargetConfidenceTier
ComplianceControldora-art25100%live
ComplianceControlowasp_llm_top10-llm06100%live
ComplianceControliso27001-a.5.7100%live
ComplianceControlnist_csf-gv100%live
ComplianceControlcra-art13100%live
ComplianceControlgdpr-art35100%live
ComplianceControliso27001-a.5.23100%live
ComplianceControlnis2-art21i100%live
ComplianceControlcis_v8-13100%live
ComplianceControlgdpr-art25100%live
ComplianceControlcis_v8-18100%live
ComplianceControliso27001-a.8.16100%live
ComplianceControlcis_v8-2100%live
ComplianceControldora-art5100%live
ComplianceControliso27001-a.8.21100%live
ComplianceControldora-art9100%live
ComplianceControlgdpr-art32100%live
ComplianceControlcis_v8-3100%live
ComplianceControlgdpr-art5100%live
ComplianceControliso27001-a.8.9100%live
ComplianceControliso27001-a.8.8100%live
ComplianceControldora-art6100%live
ComplianceControlnis2-art21b100%live
ComplianceControlnist_csf-pr100%live
ComplianceControlai_act-art15100%live
ComplianceControldora-art11100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Mitigation
Execution Prevention
Mitigation
Network Intrusion Prevention
Mitigation
Exploit Protection
Mitigation
Antivirus/Antimalware
Mitigation
Privileged Process Integrity
Mitigation
Limit Software Installation
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, Founder at SQUR.