AXIOM THREAT DESK · MITRE ATT&CK & CAPEC BRIDGE
MITRE ATT&CK & CAPEC Adversary Pattern Matrix
Cross-walk between STRIDE design findings, MITRE CAPEC common attack patterns, ATT&CK adversary techniques, and NIST SP 800-53 Rev. 5 controls.
CAPEC-66T1190 · Exploit Public-Facing Application
STRIDE Vector: Tampering (T-1) · Control: SI-10 · Input Validation
CAPEC-122T1078 · Valid Accounts / Privilege Abuse
STRIDE Vector: Elevation of Privilege (E-1) · Control: AC-3 · Access Enforcement
CAPEC-151T1556 · Modify Authentication Process
STRIDE Vector: Spoofing (S-1) · Control: IA-2(1) · Multi-Factor Auth
CAPEC-116T1552 · Unsecured Credentials in Files
STRIDE Vector: Information Disclosure (I-1) · Control: SC-28 · Protection at Rest
CAPEC-93T1562.008 · Disable Cloud Logs
STRIDE Vector: Repudiation (R-1) · Control: AU-9 · Protection of Audit Info