The sub-techniques beta is now live! Read the release blog post for more info.

Environment Variable Permissions

Prevent modification of environment variables by unauthorized users and groups.

ID: M1039
Version: 1.0
Created: 11 June 2019
Last Modified: 11 June 2019

Techniques Addressed by Mitigation

Domain ID Name Description
Enterprise T1146 Clear Command History

Making the associated environment variables read only can make sure that the history is preserved.[1]

Enterprise T1148 HISTCONTROL

Prevent users from changing the HISTCONTROL environment variable.

References