271 defences1,047 crosswalks

D3FENDD3FEND defensive matrix

7 tactics · 271 defensive techniques · 1,047 defends_against crosswalks to MITRE ATT&CK. Authored by Adam Lundqvist.

TACTICModelHardenDetectIsolateDeceiveEvictRestoreLEVELTechniqueSub-technique
ATT&CK coverage
0
1
2-3
4-5
6+

MODModel0 techniques

HARHarden44 techniques

D3-PH
Platform Hardening
D3-FE
File Encryption
D3-AA
Agent Authentication
D3-CH
Credential Hardening
D3-MFA
Multi-factor Authentication
D3-SU
Software Update
D3-TBA
Token-based Authentication
D3-CRO
Credential Rotation
D3-PWA
Password Authentication
D3-SPP
Strong Password Policy
D3-TB
Token Binding
D3-CBAN
Certificate-based Authentication
D3-BAN
Biometric Authentication
D3-AH
Application Hardening
D3-SCP
System Configuration Permissions
D3-PSEP
Process Segment Execution Prevention
D3-SAOR
Segment Address Offset Randomization
D3-RH
Radiation Hardening
D3-SFCV
Stack Frame Canary Validation
D3-ACH
Application Configuration Hardening
D3-DENCR
Disk Encryption
D3-BA
Bootloader Authentication
D3-CP
Certificate Pinning
D3-CS
Credential Scrubbing
D3-DLV
Domain Logic Validation
D3-HBWP
Hardware-based Write Protection
D3-SCH
Source Code Hardening
D3-TL
Trusted Library
D3-VI
Variable Initialization
D3-CFI
Control Flow Integrity
D3-DCE
Dead Code Elimination
D3-DLIC
Driver Load Integrity Checking
D3-EHPV
Exception Handler Pointer Validation
D3-IRV
Integer Range Validation
D3-MAN
Message Authentication
D3-MENCR
Message Encryption
D3-MH
Message Hardening
D3-PAN
Pointer Authentication
D3-PEH
Physical Enclosure Hardening
D3-PV
Pointer Validation
D3-RN
Reference Nullification
D3-TAAN
Transfer Agent Authentication
D3-TBI
TPM Boot Integrity
D3-VTV
Variable Type Validation

DETDetect0 techniques

ISOIsolate0 techniques

DECDeceive0 techniques

EVIEvict0 techniques

RESRestore10 techniques

D3-RO
Restore Object
D3-RF
Restore File
D3-RC
Restore Configuration
D3-RA
Restore Access
D3-RS
Restore Software
D3-RD
Restore Database
D3-RIC
Reissue Credential
D3-RUAA
Restore User Account Access
D3-RNA
Restore Network Access
D3-RDI
Restore Disk Image
Sourced from MITRE D3FEND ontology. Cross-walks ingested via the D3FEND CSV feed. Curated by Adam Lundqvist, Founder at SQUR.
D3FEND defensive matrix | SQUR Knowledge Base