D3-SDM: System Daemon Monitoring

MITRE D3FEND countermeasure

What it does

Tracking changes to the state or configuration of critical system level processes.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1053
• T1053.002
• T1053.003
• T1053.005
• T1053.006
• T1053.007

Source

• MITRE D3FEND D3-SDM