Umbra Wiki defense defense/D3-AM
Back to wiki

D3-AM — Access Modeling

provenance: imported · ATT&CK: T1078 T1078.001 T1078.002 T1078.003 T1078.004 T1087 T1087.001 T1087.002 T1087.004 T1098 T1098.001 T1098.002 T1098.003 T1098.004 T1098.005 T1098.006 T1098.007 T1134 T1134.005 T1136 T1136.001 T1136.002 T1136.003 T1222 T1222.001 T1222.002 T1484 T1484.001 T1484.002 T1531 T1548 T1548.001 T1548.005 T1552 T1552.006 T1556 T1556.009 T1615

D3-AM: Access Modeling

MITRE D3FEND countermeasure

What it does

Access modeling captures and records the access permissions granted to identities (e.g., administrators, users, groups, systems) and optionally includes details on how these identities are stored, managed, and shared across systems.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source