Security Stack Mappings – Microsoft 365 Mappings

April 17, 2024

Project Summary

The project presents a comprehensive mapping of M365’s native security features against the MITRE ATT&CK® framework, detailing how these capabilities can protect, detect, and respond to cyber threats. By reviewing M365 documentation, the project identifies security actions that can mitigate adversary behaviors, providing a valuable tool for organizations to improve their threat-informed defense strategies.

Problem

Users of M365 lack a comprehensive view of how native M365 security controls can help defend against real-world adversary TTPs.

Solution

Create mappings to show which M365 native security controls can defend against specific ATT&CK techniques.

Impact

Empower defenders with independent assessments of which M365 controls mitigate relevant adversary TTPs.

Project Resources:

Project Announcement Project Website GitHub

---

Funding Research Participants

---

---

Non-Profit Participants

---