Umbra Wiki defense defense/D3-RN
Back to wiki

D3-RN — Reference Nullification

provenance: imported

D3-RN: Reference Nullification

MITRE D3FEND countermeasure

What it does

Invalidating all pointers that reference a specific memory block, ensuring that the block cannot be accessed or modified after deallocation.

Attacks this counters

No ATT&CK technique in this corpus maps to this countermeasure. D3FEND may map it to techniques outside the Enterprise matrix, or to ones MITRE has since revoked — absence here is about this corpus, not about the countermeasure.

Source