Skip to content

Data destruction

Info

ID: MS-TA7027
Tactic: Impact
MITRE technique: T1485

Attackers who gain sufficient privileges within a cloud web application may delete or corrupt data stored in the app or in connected cloud resources such as databases and storage.

Mitigations

ID Mitigation Description
MS-M7040 Restrict delete and write permissions Limit who can delete or modify data in storage accounts, databases, and other repositories.
MS-M7034 Enable versioning and recovery mechanisms Use versioning, soft delete, or recycle bins to allow recovery of deleted or modified data.
MS-M7041 Implement backup and recovery plans Regularly back up critical data to separate, protected locations and test restoration procedures.