D3-EHB: Endpoint Health Beacon

MITRE D3FEND countermeasure

What it does

Monitoring the security status of an endpoint by sending periodic messages with health status, where absence of a response may indicate that the endpoint has been compromised.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1114
• T1114.002
• T1505
• T1505.002
• T1505.003
• T1578
• T1578.002
• T1578.003
• T1578.004

Source

• MITRE D3FEND D3-EHB