Umbra Wiki defense defense/D3-FMVV
Back to wiki

D3-FMVV — File Metadata Value Verification

provenance: imported

D3-FMVV: File Metadata Value Verification

MITRE D3FEND countermeasure

What it does

The process of checking specific static values within a file, such as file signatures or magic numbers, to ensure they match the expected values defined by the file format specification.

Attacks this counters

No ATT&CK technique in this corpus maps to this countermeasure. D3FEND may map it to techniques outside the Enterprise matrix, or to ones MITRE has since revoked — absence here is about this corpus, not about the countermeasure.

Source