How often does the Microsoft Threat Modeling Tool update its threat database?

Melanie Knowles 20 Reputation points
2024-02-08T02:44:08.0666667+00:00

I’m trying to find out how often the Threat Modeling Tool threat database is updated. It would also be great to find out what threat intelligence sources the tool uses.

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
0 comments No comments
{count} votes

Accepted answer
  1. Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator
    2024-02-09T00:50:42.3266667+00:00

    Hi @Melanie Knowles ,

    Based on the version release history it appears to be updated at least 3-4 times per year. https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-releases

    Because the tool is a click-to-download, updates are pushed each time users open the tool. https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-getting-started?source=recommendations

    Regarding intelligence sources, the tool is designed so that users can proactively identify their security objectives, identify relevant threats, and identify relevant vulnerabilities and countermeasures. The tool provides guidance based on security best practices. See Threat Modeling Web Applications and Training

    The modeling templates are also open source so that improvements can be shared with Microsoft and updates can be merged. https://github.com/Microsoft/threat-modeling-templates

    If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.