The sub-techniques beta is now live! Read the release blog post for more info.

Limit Software Installation

Block users or groups from installing unapproved software.

ID: M1033
Version: 1.0
Created: 11 June 2019
Last Modified: 11 June 2019

Techniques Addressed by Mitigation

Domain ID Name Description
Enterprise T1176 Browser Extensions

Only install browser extensions from trusted sources that can be verified. Browser extensions for some browsers can be controlled through Group Policy. Change settings to prevent the browser from installing extensions without sufficient permissions.

Enterprise T1501 Systemd Service

Restrict software installation to trusted repositories only and be cautious of orphaned software packages.