D3-PSMD — Process Self-Modification Detection
D3-PSMD: Process Self-Modification Detection
MITRE D3FEND countermeasure
What it does
Detects processes that modify, change, or replace their own code at runtime.
Attacks this counters
The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.
- T1003
- T1003.001
- T1003.002
- T1003.004
- T1033
- T1053
- T1053.002
- T1053.003
- T1053.005
- T1053.006
- T1053.007
- T1212
- T1505
- T1505.002
- T1505.003
- T1546
- T1546.007
- T1550
- T1550.001
- T1550.002
- T1550.003
- T1550.004
- T1556
- T1556.001
- T1556.002
- T1556.003
- T1556.004
- T1556.005
- T1556.006
- T1556.007
- T1556.008
- T1556.009
- T1621
Source
Related
technique/T1003 technique/T1003.001 technique/T1003.002 technique/T1003.004 technique/T1033 technique/T1053 technique/T1053.002 technique/T1053.003 technique/T1053.005 technique/T1053.006 technique/T1053.007 technique/T1212 technique/T1505 technique/T1505.002 technique/T1505.003 technique/T1546 technique/T1546.007 technique/T1550 technique/T1550.001 technique/T1550.002 technique/T1550.003 technique/T1550.004 technique/T1556 technique/T1556.001 technique/T1556.002 technique/T1556.003 technique/T1556.004 technique/T1556.005 technique/T1556.006 technique/T1556.007 technique/T1556.008 technique/T1556.009 technique/T1621