Threat P.IS.HP.2

URI: P.IS.HP.2

Package: Theft

< prev | next >

Description: Process Process re-enabled on stolen device Host: if an attacker gains access to stolen device Host, they can restart Process, overriding the policy to disable Process.

Threat Type: Primary Threat

Matching Pattern:

P.IS.HP.2
MP-HP

Finds a Process and its Host, and optionally the host manager and the interactive user of the process.

        (empty)

P.IS.HP.2
DF.Auth.HPDSDADF.0

Service Process serves an unauthentic stored copy of data Data to FlowsTo: if the locally stored copy of Data on Host served by Process is unauthentic, so will the flow of Data served to FlowsTo.
P.IS.HP.2
DF.Auth.PDFIDADFI.0

Unauthentic data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is unauthentic, so is the forwarded flow to FlowsTo.
P.IS.HP.2
DF.Auth.PDFODADFO.0

Unauthentic data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is unauthentic, so is the forwarded flow to FlowsTo.
P.IS.HP.2
DF.I.HPDSDADF.0

Service Process serves a corrupt stored copy of data Data to FlowsTo: if the locally stored copy of Data on Host served by Process is corrupt, so will the flow of Data served to FlowsTo.
P.IS.HP.2
DF.I.HP-iDODF.0

Loss of reliability at Process corrupts outbound flow of data Data to FlowsTo: if there is a loss of reliability at process Process it may send corrupt output Data to FlowsTo.
P.IS.HP.2
DF.I.PDFIDADFI.0

Corrupt data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is corrupt, so is the forwarded flow to FlowsTo.
P.IS.HP.2
DF.I.PDFODADFO.0

Corrupt data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is corrupt, so is the forwarded flow to FlowsTo.
P.IS.HP.2
DF.W.HPDSDADF.0

Service Process serves an infected stored copy of data Data to FlowsTo: if the locally stored copy of Data on Host served by Process is infected by malware, so will the flow of Data served to FlowsTo.
P.IS.HP.2
DF.W.PDFIDADFI.0

Infected data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is infected by malware, so is the forwarded flow to FlowsTo.
P.IS.HP.2
DF.W.PDFODADFO.0

Infected data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is infected by malware, so is the forwarded flow to FlowsTo.
P.IS.HP.2
DS.Auth.HPDFDADS.0

Flow of unauthentic data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is unauthentic, then so will be the copy saved locally on device Host by Process.
P.IS.HP.2
DS.I.HPDFDADS.0

Flow of corrupt data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is corrupt, then so will be the copy saved locally on device Host by Process.
P.IS.HP.2
DS.I.HP-iDS.0

Unreliable process Process corrupts locally stored copy of Data: if process Process is not reliable, it may accidentally corrupt a copy of Data stored on its host device Host, to which it has write access.
P.IS.HP.2
DS.W.HPDFDADS.0

Flow of infected data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is infected by malware, then so will be the copy saved locally on device Host by Process.
P.IS.HP.2
Hu.U.HuirPv-iD.0

User Human affected by output Data from unreliable process Process: if process Process is unreliable, any output it provides for display to interactive user Human is likely to be incorrect and may affect the user.

        (empty)