Regularly audit webhooks

Organizations should regularly review and audit the webhooks used in their web applications to identify any unauthorized or malicious ones.
Unused webhooks should be deleted, and new ones should be approved only after careful review.

Applies to

T0156 Exfiltration over webhooks

References

None listed.