271 defences357 crosswalks
D3FENDD3FEND defensive matrix
7 tactics · 271 defensive techniques · 357 defends_against crosswalks to MITRE ATT&CK. Authored by Adam Lundqvist.
ATT&CK coverage
0
1
2-3
4-5
6+
MODModel0 techniques
HARHarden11 techniques
D3-CDP
D3-CDP Change Default Password
Counters 20 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-CERO
D3-CERO Certificate Rotation
Counters 20 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-OTP
D3-OTP One-time Password
Counters 19 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-PR
D3-PR Password Rotation
Counters 19 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-EMH
D3-EMH Electromagnetic Radiation Hardening
Counters 11 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-RFS
D3-RFS RF Shielding
Counters 11 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-DRA
D3-DRA Disable Remote Access
Counters 4 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-BMA
D3-BMA Bus Message Authentication
Counters 0 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-MBSV
D3-MBSV Memory Block Start Validation
Counters 0 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-NPC
D3-NPC Null Pointer Checking
Counters 0 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
D3-OLV
D3-OLV Operational Logic Validation
Counters 0 ATT&CK techniques
Tactic: Harden · Level: subtechnique · Click to inspect
DETDetect22 techniques
D3-FCR
D3-FCR File Content Rules
Counters 99 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-SBV
D3-SBV Service Binary Verification
Counters 16 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-SFA
D3-SFA System File Analysis
Counters 16 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-AEM
D3-AEM Application Exception Monitoring
Counters 14 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-PLA
D3-PLA Process Lineage Analysis
Counters 14 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-EHB
D3-EHB Endpoint Health Beacon
Counters 7 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-MBT
D3-MBT Memory Boundary Tracking
Counters 7 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-ACA
D3-ACA Active Certificate Analysis
Counters 6 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-PCA
D3-PCA Passive Certificate Analysis
Counters 6 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-SICA
D3-SICA System Init Config Analysis
Counters 5 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-URA
D3-URA URL Reputation Analysis
Counters 4 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-IDA
D3-IDA Input Device Analysis
Counters 3 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-SDM
D3-SDM System Daemon Monitoring
Counters 3 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-FCA
D3-FCA File Creation Analysis
Counters 2 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-SFV
D3-SFV System Firmware Verification
Counters 2 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-SJA
D3-SJA Scheduled Job Analysis
Counters 2 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-USICA
D3-USICA User Session Init Config Analysis
Counters 2 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-DNRA
D3-DNRA Domain Name Reputation Analysis
Counters 0 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-FHRA
D3-FHRA File Hash Reputation Analysis
Counters 0 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-IPRA
D3-IPRA IP Reputation Analysis
Counters 0 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-PFV
D3-PFV Peripheral Firmware Verification
Counters 0 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
D3-RFUM
D3-RFUM Remote Firmware Update Monitoring
Counters 0 ATT&CK techniques
Tactic: Detect · Level: subtechnique · Click to inspect
ISOIsolate0 techniques
DECDeceive0 techniques
EVIEvict4 techniques
D3-HR
D3-HR Host Reboot
Counters 14 ATT&CK techniques
Tactic: Evict · Level: subtechnique · Click to inspect
D3-ER
D3-ER Email Removal
Counters 6 ATT&CK techniques
Tactic: Evict · Level: subtechnique · Click to inspect
D3-DKP
D3-DKP Disk Partitioning
Counters 3 ATT&CK techniques
Tactic: Evict · Level: subtechnique · Click to inspect
D3-DKE
D3-DKE Disk Erasure
Counters 1 ATT&CK technique
Tactic: Evict · Level: subtechnique · Click to inspect