About

The purpose of the threat matrix for cloud web applications is to conceptualize the known tactics, techniques, and procedures (TTP) that adversaries may use against cloud web applications and serverless environments. Inspired from MITRE ATT&CK, the threat matrix for cloud web applications is designed to give quick insight into a potential TTP that an adversary may be using in their attack campaign. The threat matrix for cloud web applications contains also mitigations specific to cloud web application environments and attack techniques.

Acknowledgments

The threat matrix for cloud web application is created by Lior Leizerovich and Yossi Weizman of the Microsoft Defender for Cloud team.

MITRE ATT&CK © 2025 The MITRE Corporation - This work is reproduced and distributed with the permission of The MITRE Corporation.