Skip to main content

CCC.Core.TH16: Publications are Disabled

Threat ID:CCC.Core.TH16
Title:Publications are Disabled
Description:

Publication of events, metrics, and runtime logs may be disabled, leading to a lack of expected security and operational information being shared. This can impact system availability by delaying the detection of incidents while also impacting system design decisions and enforcement of operational thresholds, such as autoscaling or cost management.

Related Capabilities

IDTitleDescription
CCC.Core.F09Metrics PublicationThe service automatically publishes structured, numeric, time-series data points related to the performance, availability, and health of the service or its child resources.

External Mappings

Reference IDEntry IDStrengthRemarks
MITRE-ATT&CK
T1562
0
Impair Defenses