{"id":41565,"date":"2021-06-30T22:02:11","date_gmt":"2021-06-30T22:02:11","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/microsoft-hooks-up-with-mitre-to-map-azures-attck-surface-for-proactive-security\/"},"modified":"2021-06-30T22:02:11","modified_gmt":"2021-06-30T22:02:11","slug":"microsoft-hooks-up-with-mitre-to-map-azures-attck-surface-for-proactive-security","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-hooks-up-with-mitre-to-map-azures-attck-surface-for-proactive-security\/","title":{"rendered":"Microsoft hooks up with MITRE to map Azure’s ATT&CK surface for ‘proactive security’"},"content":{"rendered":"

MITRE’s Centre for Threat-Informed Defence (CTID) and Microsoft have jointly rolled out Security Stack Mappings for Azure, aimed at bringing the former’s Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) framework into the latter’s cloud platform \u2013 with rival platforms to follow.<\/p>\n

Launched in 2015, MITRE’s ATT&CK framework was created to provide businesses with “a globally accessible knowledge base of adversary tactics and techniques based on real-world observations” in the hopes of building a foundation for threat-model development.<\/p>\n

While access to ATT&CK is provided for all at no charge, MITRE is looking to boost its usage, hence the Microsoft partnership. The deal made Azure the first cloud platform to actively link to ATT&CK by mapping in-built security controls to the framework.<\/p>\n