D3-JFAPA — Job Function Access Pattern Analysis
D3-JFAPA: Job Function Access Pattern Analysis
MITRE D3FEND countermeasure
What it does
Detecting anomalies in user access patterns by comparing user access activity to behavioral profiles that categorize users by role such as job title, function, department.
Attacks this counters
No ATT&CK technique in this corpus maps to this countermeasure. D3FEND may map it to techniques outside the Enterprise matrix, or to ones MITRE has since revoked — absence here is about this corpus, not about the countermeasure.