Umbra Wiki defense defense/D3-RTA
Back to wiki

D3-RTA — RPC Traffic Analysis

provenance: imported · ATT&CK: T1558 T1558.003

D3-RTA: RPC Traffic Analysis

MITRE D3FEND countermeasure

What it does

Monitoring the activity of remote procedure calls in communication traffic to establish standard protocol operations and potential attacker activities.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source