T1199Initial Access
Trusted Relationship
Adversaries may breach or otherwise leverage organizations who have access to intended victims. Access through trusted third party relationship abuses an existing connection that may not be protected or receives less scrutiny than standard mechanisms of gaining access to a network. Organizations often grant elevated access to second or third-party external providers in order to allow them to…
CVEs1
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.1
Reports0
Detections
2 Sigma rules tagged T1199Trusted RelationshipT11992 general rules
- Microsoft 365 - User Restricted from Sending Emailmediumtest
- Okta Session Impersonation Granted From Untrusted Domainmediumexperimental
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Trusted Relationship
1 CVE, by priority. Each link shows its badge.- CVE-2024-53704SonicWall SonicOS SSLVPN Improper Authentication VulnerabilitySonicWall · SonicOSKEVRansomwarePublic exploitCritical · 9.8T1199Trusted RelationshipT1078.004Cloud Accounts+2 moreMITRE CTID mapping of the KEV entry · how it is exploited95.3%Top 0.13%79.8priority