D3-LAM: Local Account Monitoring

MITRE D3FEND countermeasure

What it does

Analyzing local user accounts to detect unauthorized activity.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1078
• T1078.003
• T1087
• T1087.001
• T1136
• T1136.001

Source

• MITRE D3FEND D3-LAM