Poisoned Pipeline / Mitigations / M1132

M1132

Enable MFA for user accounts

Enable MFA for all user accounts, which adds an additional layer of security beyond passwords.
This can help prevent unauthorized access even if the user account credentials are compromised.

Applies to

• T0137 Weak authentication methods
• T0113 Compromised user account

References

• https://cheatsheetseries.owasp.org/cheatsheets/Multifactor_Authentication_Cheat_Sheet.html