Data theft

Info

ID: MS-TA7028
Tactic: Impact
MITRE technique:

If attackers gain access to the application, its storage, or connected cloud resources, they may retrieve data stored or processed by the application. This includes application content, user information, configuration files, or proprietary content.

Mitigations

ID	Mitigation	Description
MS-M7017	Implement least-privilege access	Limit access to sensitive data based on need-to-know principles and role-based permissions.
MS-M7037	Restrict outbound network access	Use egress filtering and firewall rules to prevent unauthorized data exfiltration.