risks / Defense destruction

Description

Allows an attacker to disable or remove defense mechanism, such as IDS, antivirus, and the like. Note that other mechanisms may serve as defense mechanisms but are explicitly separate (see `destruction:logs` and `destruction:policy`)

Risk: EVASION

This risk allows an attacker to evade detection, allowing the attacker to exploit additional risks without detection, and prevent exploit remediation.

Mitigations

1. Monitor defense system metrics

Links

1. https:/​/​attack.mitre.org/​techniques/​T1562/​

Affected Privileges

An attacker may be able to exploit this risk if they gain any of the following privileges: