Umbra Wiki defense defense/D3-ER
Back to wiki

D3-ER — Email Removal

provenance: imported · ATT&CK: T1114 T1114.001 T1114.002 T1505 T1505.002 T1534 T1566 T1566.001 T1566.002

D3-ER: Email Removal

MITRE D3FEND countermeasure

What it does

The email removal technique deletes email files from system storage.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source