Umbra Wiki defense defense/D3-FMCV
Back to wiki

D3-FMCV — File Metadata Consistency Validation

provenance: imported

D3-FMCV: File Metadata Consistency Validation

MITRE D3FEND countermeasure

What it does

The process of validating the consistency between a file's metadata and its actual content, ensuring that elements like declared lengths, pointers, and checksums accurately describe the file's content.

Attacks this counters

No ATT&CK technique in this corpus maps to this countermeasure. D3FEND may map it to techniques outside the Enterprise matrix, or to ones MITRE has since revoked — absence here is about this corpus, not about the countermeasure.

Source