D3-FBA: Firmware Behavior Analysis

MITRE D3FEND countermeasure

What it does

Analyzing the behavior of embedded code in firmware and looking for anomalous behavior and suspicious activity.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1014
• T1542
• T1542.001
• T1542.002
• T1542.004

Source

• MITRE D3FEND D3-FBA