Umbra Wiki defense defense/D3-SAOR
Back to wiki

D3-SAOR — Segment Address Offset Randomization

provenance: imported · ATT&CK: T1033 T1055 T1055.012 T1056 T1056.004 T1068 T1189 T1190 T1203 T1210 T1211 T1212 T1218 T1218.013 T1620

D3-SAOR: Segment Address Offset Randomization

MITRE D3FEND countermeasure

What it does

Randomizing the base (start) address of one or more segments of memory during the initialization of a process.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source