Defacement
Adversaries may attempt to alter the web application content or appearance in order to damage reputation, intimidate victims or spread propaganda. This could be done through access to the application itself, to the source code or any assets it uses.
Mitigations
| ID | Mitigation | Description |
|---|---|---|
| MS-M7008 | Secure CI/CD pipelines | Protect deployment workflows from unauthorized modifications that could alter application content. |
| MS-M7042 | Restrict deployment permissions | Limit who can deploy code or modify application content to authorized personnel only. |
| MS-M7034 | Enable versioning and recovery mechanisms | Use version control and automated rollback capabilities to quickly restore legitimate content. |