Detectsubtechnique
D3-MBTMemory Boundary Tracking
Definition
Analyzing a call stack for return addresses which point to unexpected memory locations.
Defends against7
| Type | Target | Confidence | Tier |
|---|---|---|---|
| SubTechnique | Credential API Hookingt1056.004 | 100% | live |
| Technique | Exploitation for Credential Accesst1212 | 100% | live |
| Technique | Exploitation for Defense Evasiont1211 | 100% | live |
| Technique | Exploitation for Client Executiont1203 | 100% | live |
| Technique | Exploitation of Remote Servicest1210 | 100% | live |
| SubTechnique | Process Hollowingt1055.012 | 100% | live |
| Technique | Exploitation for Privilege Escalationt1068 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.