Umbra Wiki defense defense/D3-AEM
Back to wiki

D3-AEM — Application Exception Monitoring

provenance: imported · ATT&CK: T1003 T1003.005 T1003.006 T1070 T1070.003 T1110 T1110.001 T1110.003 T1110.004 T1134 T1134.002 T1134.003 T1140 T1187 T1546 T1546.003 T1546.005 T1548 T1548.003

D3-AEM: Application Exception Monitoring

MITRE D3FEND countermeasure

What it does

Monitoring the failures of system counters and timers.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source