D3-FC: File Carving

MITRE D3FEND countermeasure

What it does

Identifying and extracting files from network application protocols through the use of network stream reassembly software.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1071
• T1071.002
• T1570

Source

• MITRE D3FEND D3-FC