thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Microsoft Threat Modeling Tool

A free Microsoft application for drawing DFDs and automatically generating STRIDE-based threats.

Definition

The tool provides templates for Azure and generic stencils, auto-generates threats per element and interaction, and lets teams track mitigation status and export reports. It supports the Microsoft SDL design phase.

Example

An architect draws a web app, API and SQL database and the tool generates 45 candidate STRIDE threats.

Exam tip

Associate it with STRIDE and DFDs; it does not scan code.

Related terms