D3-PHDURA — Per Host Download-Upload Ratio Analysis
D3-PHDURA: Per Host Download-Upload Ratio Analysis
MITRE D3FEND countermeasure
What it does
Detecting anomalies that indicate malicious activity by comparing the amount of data downloaded versus data uploaded by a host.
Attacks this counters
The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.
- T1001
- T1001.001
- T1001.002
- T1001.003
- T1003
- T1003.006
- T1008
- T1011
- T1011.001
- T1018
- T1020
- T1020.001
- T1021
- T1021.001
- T1021.002
- T1021.003
- T1021.004
- T1021.005
- T1021.006
- T1021.007
- T1021.008
- T1029
- T1030
- T1041
- T1047
- T1048
- T1048.001
- T1048.002
- T1048.003
- T1071
- T1071.001
- T1071.002
- T1071.003
- T1071.004
- T1071.005
- T1090
- T1090.001
- T1090.002
- T1090.003
- T1090.004
- T1095
- T1098
- T1098.001
- T1102
- T1102.001
- T1102.002
- T1102.003
- T1104
- T1105
- T1110
- T1110.003
- T1110.004
- T1132
- T1132.001
- T1132.002
- T1185
- T1189
- T1190
- T1197
- T1199
- T1204
- T1204.001
- T1205
- T1205.001
- T1205.002
- T1207
- T1210
- T1218
- T1218.003
- T1219
- T1219.001
- T1219.002
- T1219.003
- T1498
- T1498.001
- T1498.002
- T1499
- T1499.002
- T1542
- T1542.005
- T1546
- T1546.003
- T1546.008
- T1550
- T1550.001
- T1550.004
- T1557
- T1557.001
- T1557.002
- T1557.003
- T1557.004
- T1558
- T1558.003
- T1563
- T1563.001
- T1563.002
- T1565
- T1565.002
- T1566
- T1566.001
- T1566.002
- T1567
- T1567.001
- T1567.002
- T1567.003
- T1567.004
- T1568
- T1568.001
- T1568.002
- T1568.003
- T1570
- T1571
- T1572
- T1573
- T1573.001
- T1573.002
Source
Related
technique/T1001 technique/T1001.001 technique/T1001.002 technique/T1001.003 technique/T1003 technique/T1003.006 technique/T1008 technique/T1011 technique/T1011.001 technique/T1018 technique/T1020 technique/T1020.001 technique/T1021 technique/T1021.001 technique/T1021.002 technique/T1021.003 technique/T1021.004 technique/T1021.005 technique/T1021.006 technique/T1021.007 technique/T1021.008 technique/T1029 technique/T1030 technique/T1041 technique/T1047 technique/T1048 technique/T1048.001 technique/T1048.002 technique/T1048.003 technique/T1071 technique/T1071.001 technique/T1071.002 technique/T1071.003 technique/T1071.004 technique/T1071.005 technique/T1090 technique/T1090.001 technique/T1090.002 technique/T1090.003 technique/T1090.004 technique/T1095 technique/T1098 technique/T1098.001 technique/T1102 technique/T1102.001 technique/T1102.002 technique/T1102.003 technique/T1104 technique/T1105 technique/T1110 technique/T1110.003 technique/T1110.004 technique/T1132 technique/T1132.001 technique/T1132.002 technique/T1185 technique/T1189 technique/T1190 technique/T1197 technique/T1199 technique/T1204 technique/T1204.001 technique/T1205 technique/T1205.001 technique/T1205.002 technique/T1207 technique/T1210 technique/T1218 technique/T1218.003 technique/T1219 technique/T1219.001 technique/T1219.002 technique/T1219.003 technique/T1498 technique/T1498.001 technique/T1498.002 technique/T1499 technique/T1499.002 technique/T1542 technique/T1542.005 technique/T1546 technique/T1546.003 technique/T1546.008 technique/T1550 technique/T1550.001 technique/T1550.004 technique/T1557 technique/T1557.001 technique/T1557.002 technique/T1557.003 technique/T1557.004 technique/T1558 technique/T1558.003 technique/T1563 technique/T1563.001 technique/T1563.002 technique/T1565 technique/T1565.002 technique/T1566 technique/T1566.001 technique/T1566.002 technique/T1567 technique/T1567.001 technique/T1567.002 technique/T1567.003 technique/T1567.004 technique/T1568 technique/T1568.001 technique/T1568.002 technique/T1568.003 technique/T1570 technique/T1571 technique/T1572 technique/T1573 technique/T1573.001 technique/T1573.002