Detecttechnique

D3-FCFile Carving

File Carving

Definition

Identifying and extracting files from network application protocols through the use of network stream reassembly software.

Defends against2

TypeTargetConfidenceTier
SubTechniqueFile Transfer Protocolst1071.002100%live
TechniqueLateral Tool Transfert1570100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Defence
File Content Analysis
Defence
Restore File
Defence
File Content Rules
Defence
File Content Decompression Checking
Defence
File Format Verification
Defence
File Hashing
Sourced from MITRE D3FEND ontology. Curated by Adam Lundqvist, SQUR.