1. Home
  2. Techniques
  3. Space
  4. Supply Chain Compromise

Supply Chain Compromise

ID Name
T1195.001 Compromise Software Dependencies and Development Tools
T1195.002 Compromise Software Supply Chain
T1195.003 Compromise Hardware Supply Chain

Adversaries may manipulate products or product delivery mechanisms prior to receipt by a final consumer for the purpose of data or system compromise. [1]

ID: T1195
Sub-techniques:  T1195.001, T1195.002, T1195.003
ⓘ
Tactic: Initial Access
ⓘ
Platforms: None
Version: 2.0
Created: 25 August 2022
Last Modified: 05 February 2025

Mitigations

ID Mitigation Description
M1046 Boot Integrity
M2019 Data integrity schemes
M2049 Defense-in-depth measures
M2048 Digital signing of software components
M2050 Supply from trustworthy sources only
M2047 Vulnerability/malware scanning

References

  1. The MITRE Corporation. (2015-2022). MITRE ATT&CK® Retrieved September 27, 2022.