Poisoned Pipeline / Mitigations / M1310

M1310

Implement least privilege principle

Follow the POLP, which involves granting users the minimum necessary privileges to perform their job functions, and avoid assigning excessive privileges to user accounts.
Regularly review and update user privileges based on the principle of least privilege, and remove unnecessary privileges to reduce the risk of overprivileged accounts.

Applies to

• T0165 Create access token
• T0131 Overprivileged user account

References

• https://www.cyberark.com/what-is/least-privilege/