Umbra Wiki defense defense/D3-ARMA
Back to wiki

D3-ARMA — ARMA Model

provenance: imported

D3-ARMA: ARMA Model

MITRE D3FEND countermeasure

What it does

Autoregressive-moving-average (ARMA) models provide a parsimonious description of a (weakly) stationary stochastic process in terms of two polynomials, one for the autoregression (AR) and the second for the moving average (MA).

Attacks this counters

No ATT&CK technique in this corpus maps to this countermeasure. D3FEND may map it to techniques outside the Enterprise matrix, or to ones MITRE has since revoked — absence here is about this corpus, not about the countermeasure.

Source