Application Security
Detecting and Mitigating Local Email Collection (T1114.001)
Outlook stores mail in local PST and OST files that attackers can copy off a machine. See what MITRE documents and how to detect and limit it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Detecting and Mitigating Email Collection (T1114)
Mailboxes hold secrets, contracts and incident details. See how attackers collect email from clients and servers, and the audit, MFA and forwarding controls that help.
Oct 18, 20264 min read
Application Security
Detecting and Mitigating Screen Capture (T1113)
Attackers take screenshots through remote access tools and native utilities to gather information. See what MITRE documents and how to detect and limit it.
Oct 18, 20264 min read
Application Security
Detecting and Mitigating Windows Registry Modification (T1112)
Attackers edit the Windows Registry to persist, hide payloads and weaken defenses. See what MITRE documents, which events to log and how to restrict registry rights.
Oct 18, 20265 min read
Application Security
Detecting and Mitigating MFA Interception (T1111)
Attackers can capture smart card PINs, token codes and one-time codes to defeat MFA. See what MITRE documents, what to monitor and how to cut the exposure.
Oct 18, 20263 min read
Application Security
Detecting and Mitigating Credential Stuffing (T1110.004)
Credential stuffing replays username and password pairs leaked from other sites. Learn the signals, the resets that matter, and how to cut off password reuse.
Oct 18, 20265 min read
Application Security
Detecting and Mitigating Password Spraying (T1110.003)
Password spraying tries a few common passwords across many accounts to dodge lockout. Learn the log patterns, the throttling trick, and how to defend.
Oct 18, 20265 min read
Application Security
Detecting and Mitigating Password Cracking (T1110.002)
Password cracking recovers plaintext from stolen hashes, usually off your network. Learn why prevention matters more than detection and what to watch for afterwards.
Oct 18, 20262 min read
Application Security
Detecting and Mitigating Password Guessing (T1110.001)
Password guessing hits one account with many tries against SSH, RDP, SMB, cloud apps and more. See the log signals and the controls MITRE recommends.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.