Umbra Wiki defense defense/D3-OTF
Back to wiki

D3-OTF — Outbound Traffic Filtering

provenance: imported · ATT&CK: T1001 T1001.001 T1001.002 T1001.003 T1008 T1048 T1048.001 T1048.002 T1048.003 T1071 T1071.001 T1071.002 T1071.003 T1071.004 T1071.005 T1090 T1090.002 T1090.003 T1090.004 T1095 T1102 T1102.001 T1102.002 T1102.003 T1104 T1105 T1132 T1132.001 T1132.002 T1197 T1204 T1204.001 T1219 T1219.001 T1219.002 T1219.003 T1567 T1567.001 T1567.002 T1567.003 T1567.004 T1568 T1568.001 T1568.002 T1568.003 T1571 T1572 T1573 T1573.001 T1573.002

D3-OTF: Outbound Traffic Filtering

MITRE D3FEND countermeasure

What it does

Restricting network traffic originating from a private host or enclave destined towards untrusted networks.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source