D3-USICA: User Session Init Config Analysis

MITRE D3FEND countermeasure

What it does

Analyzing modifications to user session config files such as .bashrc or .bash_profile.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1546
• T1546.004
• T1564
• T1564.002

Source

• MITRE D3FEND D3-USICA