Umbra Wiki defense defense/D3-DAM
Back to wiki

D3-DAM — Domain Account Monitoring

provenance: imported · ATT&CK: T1078 T1078.002 T1087 T1087.002 T1098 T1098.002 T1098.003 T1136 T1136.002

D3-DAM: Domain Account Monitoring

MITRE D3FEND countermeasure

What it does

Monitoring the existence of or changes to Domain User Accounts.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source