Umbra Wiki defense defense/D3-FCA
Back to wiki

D3-FCA — File Creation Analysis

provenance: imported · ATT&CK: T1074 T1074.001 T1218 T1218.001

D3-FCA: File Creation Analysis

MITRE D3FEND countermeasure

What it does

Analyzing the properties of file create system call invocations.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source