271 defences886 crosswalks

D3FENDD3FEND defensive matrix

7 tactics · 271 defensive techniques · 886 defends_against crosswalks to MITRE ATT&CK. Authored by Adam Lundqvist.

TACTICModelHardenDetectIsolateDeceiveEvictRestoreLEVELTechniqueSub-technique
ATT&CK coverage
0
1
2-3
4-5
6+

MODModel27 techniques

D3-AI
Asset Inventory
D3-CI
Configuration Inventory
D3-DI
Data Inventory
D3-AVE
Asset Vulnerability Enumeration
D3-CIA
Container Image Analysis
D3-SWI
Software Inventory
D3-AM
Access Modeling
D3-OAM
Operational Activity Mapping
D3-NM
Network Mapping
D3-HCI
Hardware Component Inventory
D3-NTPM
Network Traffic Policy Mapping
D3-ALLM
Active Logical Link Mapping
D3-APLM
Active Physical Link Mapping
D3-DPLM
Direct Physical Link Mapping
D3-LLM
Logical Link Mapping
D3-NNI
Network Node Inventory
D3-PLLM
Passive Logical Link Mapping
D3-PLM
Physical Link Mapping
D3-SYSM
System Mapping
D3-SYSVA
System Vulnerability Assessment
D3-DEM
Data Exchange Mapping
D3-NVA
Network Vulnerability Assessment
D3-ODM
Operational Dependency Mapping
D3-OM
Organization Mapping
D3-ORA
Operational Risk Assessment
D3-SVCDM
Service Dependency Mapping
D3-SYSDM
System Dependency Mapping

HARHarden0 techniques

DETDetect0 techniques

ISOIsolate0 techniques

DECDeceive0 techniques

EVIEvict0 techniques

RESRestore12 techniques

D3-RO
Restore Object
D3-RF
Restore File
D3-RC
Restore Configuration
D3-RA
Restore Access
D3-RS
Restore Software
D3-RD
Restore Database
D3-RIC
Reissue Credential
D3-RUAA
Restore User Account Access
D3-ULA
Unlock Account
D3-RNA
Restore Network Access
D3-RE
Restore Email
D3-RDI
Restore Disk Image
Sourced from MITRE D3FEND ontology. Cross-walks ingested via the D3FEND CSV feed. Curated by Adam Lundqvist, Founder at SQUR.
D3FEND defensive matrix | SQUR Knowledge Base