D3FEND 技术详情
D3-FCA
定义
Analyzing the properties of file create system call invocations.
父技术
子技术
无
关联构件
CreateFile
Create File
System call to create a new file on a file system. Some operating systems implement this functionality as part of their d3f:OpenFile system call.
语义关系
出向analyzesCreate File
出向kb referenceReference - CAR-2020-09-001: Scheduled Task - FileAccess - MITRE
出向kb referenceReference - CAR-2019-07-002: Lsass Process Dump via Procdump - MITRE