Poisoned Pipeline / Mitigations / M1302

M1302

Implement strict access controls for logs

Implement strict access controls for logs to ensure that only authorized personnel have access to log files.
Use role-based access controls (RBAC) and least privilege principles to restrict access to logs to only those who need it for their job functions.

Applies to

• T0130 Harvest secrets from logs
• T0162 Passwords in CI/CD logs
• T0192 Sensitive information in logs

References

• https://www.techtarget.com/searchsecurity/tip/Security-log-management-and-logging-best-practices