Hide Navigation Hide TOC

Restrict Library Loading - M1044 (e8242a33-481c-4891-af63-4cf3e4cf6aff)

Prevent abuse of library loading mechanisms in the operating system and software to load untrusted code by configuring appropriate library loading mechanisms and investigating potential vulnerable software.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
LSASS Driver - T1547.008 (f0589bc3-a6ae-425a-a3d5-5659bfee07f4)	Attack Pattern	Restrict Library Loading - M1044 (e8242a33-481c-4891-af63-4cf3e4cf6aff)	Course of Action	1
Restrict Library Loading - M1044 (e8242a33-481c-4891-af63-4cf3e4cf6aff)	Course of Action	Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6)	Attack Pattern	1
Restrict Library Loading - M1044 (e8242a33-481c-4891-af63-4cf3e4cf6aff)	Course of Action	DLL Search Order Hijacking - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34)	Attack Pattern	1
LSASS Driver - T1547.008 (f0589bc3-a6ae-425a-a3d5-5659bfee07f4)	Attack Pattern	Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf)	Attack Pattern	2
Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6)	Attack Pattern	DLL Search Order Hijacking - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34)	Attack Pattern	2