Skip to content

Defacement

Info

ID: MS-TA7029
Tactic: Impact
MITRE technique: T1491

Adversaries may attempt to alter the web application content or appearance in order to damage reputation, intimidate victims or spread propaganda. This could be done through access to the application itself, to the source code or any assets it uses.

Mitigations

ID Mitigation Description
MS-M7008 Secure CI/CD pipelines Protect deployment workflows from unauthorized modifications that could alter application content.
MS-M7042 Restrict deployment permissions Limit who can deploy code or modify application content to authorized personnel only.
MS-M7034 Enable versioning and recovery mechanisms Use version control and automated rollback capabilities to quickly restore legitimate content.