Umbra Wiki defense defense/D3-SFCV
Back to wiki

D3-SFCV — Stack Frame Canary Validation

provenance: imported · ATT&CK: T1068 T1203 T1210 T1211 T1212

D3-SFCV: Stack Frame Canary Validation

MITRE D3FEND countermeasure

What it does

Comparing a value stored in a stack frame with a known good value in order to prevent or detect a memory segment overwrite.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source