Umbra Wiki defense defense/D3-ST
Back to wiki

D3-ST — Session Termination

provenance: imported · ATT&CK: T1021 T1021.001 T1021.004 T1133 T1134 T1134.003 T1199 T1563 T1563.001 T1563.002

D3-ST: Session Termination

MITRE D3FEND countermeasure

What it does

Forcefully end all active sessions associated with compromised accounts or devices.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

Source