D3-PSA — Process Spawn Analysis
D3-PSA: Process Spawn Analysis
MITRE D3FEND countermeasure
What it does
Analyzing spawn arguments or attributes of a process to detect processes that are unauthorized.
Attacks this counters
The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.
- T1003
- T1003.001
- T1003.002
- T1003.004
- T1007
- T1010
- T1016
- T1016.001
- T1016.002
- T1018
- T1033
- T1047
- T1053
- T1053.002
- T1053.003
- T1053.005
- T1053.006
- T1053.007
- T1055
- T1055.004
- T1055.013
- T1057
- T1082
- T1124
- T1134
- T1134.004
- T1140
- T1212
- T1218
- T1218.001
- T1218.002
- T1218.003
- T1218.005
- T1218.011
- T1220
- T1505
- T1505.001
- T1505.002
- T1505.003
- T1546
- T1546.007
- T1546.009
- T1546.010
- T1548
- T1548.002
- T1550
- T1550.001
- T1550.002
- T1550.003
- T1550.004
- T1556
- T1556.001
- T1556.002
- T1556.003
- T1556.004
- T1556.005
- T1556.006
- T1556.007
- T1556.008
- T1556.009
- T1621
Source
Related
technique/T1003 technique/T1003.001 technique/T1003.002 technique/T1003.004 technique/T1007 technique/T1010 technique/T1016 technique/T1016.001 technique/T1016.002 technique/T1018 technique/T1033 technique/T1047 technique/T1053 technique/T1053.002 technique/T1053.003 technique/T1053.005 technique/T1053.006 technique/T1053.007 technique/T1055 technique/T1055.004 technique/T1055.013 technique/T1057 technique/T1082 technique/T1124 technique/T1134 technique/T1134.004 technique/T1140 technique/T1212 technique/T1218 technique/T1218.001 technique/T1218.002 technique/T1218.003 technique/T1218.005 technique/T1218.011 technique/T1220 technique/T1505 technique/T1505.001 technique/T1505.002 technique/T1505.003 technique/T1546 technique/T1546.007 technique/T1546.009 technique/T1546.010 technique/T1548 technique/T1548.002 technique/T1550 technique/T1550.001 technique/T1550.002 technique/T1550.003 technique/T1550.004 technique/T1556 technique/T1556.001 technique/T1556.002 technique/T1556.003 technique/T1556.004 technique/T1556.005 technique/T1556.006 technique/T1556.007 technique/T1556.008 technique/T1556.009 technique/T1621