Mitigation ID: SAFE-M-19
Type: Detective Control
Complexity: High
Effectiveness: Medium
Monitor usage patterns of OAuth tokens obtained through MCP to detect anomalous access patterns that may indicate compromised tokens.
[To be documented]
- SAFE-T1007: OAuth Authorization Phishing
- SAFE-T1202: OAuth Token Persistence
- SAFE-T1801: Automated Data Harvesting