Tools / Microsoft Threat Modeling Tool (TMT) Interview questions
What is a data store in TMT?
A data store represents any place where data is persisted rather than just passed through: a relational database, a file on disk, a message queue, or a cache.
Because a data store doesn't actively execute logic the way a process does, TMT's default rules generally don't apply Spoofing or Elevation of Privilege to it directly - those categories are more relevant to whatever process reads from or writes to the store. Instead, data stores primarily attract Tampering (unauthorized modification of stored data), Information Disclosure (unauthorized reads), and Denial of Service (making the store unavailable), plus Repudiation when the store lacks an audit log proving who wrote what.
Getting this element type right matters because choosing "process" instead of "data store" for something like a cache will change which threats the engine generates for it.
More Related questions...
