D3-IAA: Identifier Activity Analysis

MITRE D3FEND countermeasure

What it does

Taking known malicious identifiers and determining if they are present in a system.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1189
• T1204
• T1204.001
• T1566
• T1566.002
• T1566.003

Source

• MITRE D3FEND D3-IAA