271 defences1,125 crosswalks
D3FENDD3FEND defensive matrix
7 tactics · 271 defensive techniques · 1,125 defends_against crosswalks to MITRE ATT&CK. Authored by Adam Lundqvist.
ATT&CK coverage
0
1
2-3
4-5
6+
MODModel0 techniques
HARHarden0 techniques
DETDetect0 techniques
ISOIsolate0 techniques
DECDeceive11 techniques
D3-DO
D3-DO Decoy Object
Counters 124 ATT&CK techniques
Tactic: Deceive · Level: technique · Click to inspect
D3-DF
D3-DF Decoy File
Counters 99 ATT&CK techniques
Tactic: Deceive · Level: technique · Click to inspect
D3-DUC
D3-DUC Decoy User Credential
Counters 19 ATT&CK techniques
Tactic: Deceive · Level: technique · Click to inspect
D3-DNR
D3-DNR Decoy Network Resource
Counters 8 ATT&CK techniques
Tactic: Deceive · Level: technique · Click to inspect
D3-CHN
D3-CHN Connected Honeynet
Counters 1 ATT&CK technique
Tactic: Deceive · Level: technique · Click to inspect
D3-DE
D3-DE Decoy Environment
Counters 1 ATT&CK technique
Tactic: Deceive · Level: technique · Click to inspect
D3-IHN
D3-IHN Integrated Honeynet
Counters 1 ATT&CK technique
Tactic: Deceive · Level: technique · Click to inspect
D3-SHN
D3-SHN Standalone Honeynet
Counters 1 ATT&CK technique
Tactic: Deceive · Level: technique · Click to inspect
D3-DP
D3-DP Decoy Persona
Counters 0 ATT&CK techniques
Tactic: Deceive · Level: technique · Click to inspect
D3-DPR
D3-DPR Decoy Public Release
Counters 0 ATT&CK techniques
Tactic: Deceive · Level: technique · Click to inspect
D3-DST
D3-DST Decoy Session Token
Counters 0 ATT&CK techniques
Tactic: Deceive · Level: technique · Click to inspect
EVIEvict19 techniques
D3-OE
D3-OE Object Eviction
Counters 104 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-FEV
D3-FEV File Eviction
Counters 101 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-CE
D3-CE Credential Eviction
Counters 36 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-PE
D3-PE Process Eviction
Counters 22 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-ANCI
D3-ANCI Authentication Cache Invalidation
Counters 19 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-CR
D3-CR Credential Revocation
Counters 19 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-AL
D3-AL Account Locking
Counters 17 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-HR
D3-HR Host Reboot
Counters 14 ATT&CK techniques
Tactic: Evict · Level: subtechnique · Click to inspect
D3-HS
D3-HS Host Shutdown
Counters 14 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-PS
D3-PS Process Suspension
Counters 14 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-PT
D3-PT Process Termination
Counters 14 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-ST
D3-ST Session Termination
Counters 8 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-ER
D3-ER Email Removal
Counters 6 ATT&CK techniques
Tactic: Evict · Level: subtechnique · Click to inspect
D3-DKF
D3-DKF Disk Formatting
Counters 3 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-DKP
D3-DKP Disk Partitioning
Counters 3 ATT&CK techniques
Tactic: Evict · Level: subtechnique · Click to inspect
D3-DKE
D3-DKE Disk Erasure
Counters 1 ATT&CK technique
Tactic: Evict · Level: subtechnique · Click to inspect
D3-RKD
D3-RKD Registry Key Deletion
Counters 1 ATT&CK technique
Tactic: Evict · Level: technique · Click to inspect
D3-DNSCE
D3-DNSCE DNS Cache Eviction
Counters 0 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
D3-DRT
D3-DRT Domain Registration Takedown
Counters 0 ATT&CK techniques
Tactic: Evict · Level: technique · Click to inspect
RESRestore12 techniques
D3-RO
D3-RO Restore Object
Counters 171 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-RF
D3-RF Restore File
Counters 99 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-RC
D3-RC Restore Configuration
Counters 53 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-RA
D3-RA Restore Access
Counters 42 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-RS
D3-RS Restore Software
Counters 25 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-RD
D3-RD Restore Database
Counters 22 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-RIC
D3-RIC Reissue Credential
Counters 19 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-RUAA
D3-RUAA Restore User Account Access
Counters 17 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-ULA
D3-ULA Unlock Account
Counters 17 ATT&CK techniques
Tactic: Restore · Level: subtechnique · Click to inspect
D3-RNA
D3-RNA Restore Network Access
Counters 6 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect
D3-RE
D3-RE Restore Email
Counters 4 ATT&CK techniques
Tactic: Restore · Level: subtechnique · Click to inspect
D3-RDI
D3-RDI Restore Disk Image
Counters 0 ATT&CK techniques
Tactic: Restore · Level: technique · Click to inspect