Poisoned Pipeline / Mitigations / M1130

M1130

Implement password rotation

If a user account has been compromised, immediately change the password for the affected account.
Ensure that the new password is strong, unique, and not used elsewhere. Encourage users to use password managers to generate and store strong, unique passwords for each account.

Applies to

• T0137 Weak authentication methods
• T0113 Compromised user account
• T0114 Compromised service account

References

• https://venturebeat.com/enterprise/password-rotation-can-make-or-break-your-security-posture/