D3-MBT — Memory Boundary Tracking

provenance: imported · ATT&CK: T1055 T1055.012 T1056 T1056.004 T1068 T1203 T1210 T1211 T1212

D3-MBT: Memory Boundary Tracking

MITRE D3FEND countermeasure

What it does

Analyzing a call stack for return addresses which point to unexpected memory locations.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source

MITRE D3FEND D3-MBT

Related

technique/T1055 technique/T1055.012 technique/T1056 technique/T1056.004 technique/T1068 technique/T1203 technique/T1210 technique/T1211 technique/T1212