D3FEND 技术详情
D3-MBT
定义
Analyzing a call stack for return addresses which point to unexpected memory locations.
父技术
子技术
无
关联构件
ProcessCodeSegment
Process Code Segment
A process code segment, also known as a text segment or simply as text, is a portion of the program's virtual address space that contains executable instructions and corresponds to the loaded image code segment. Includes additional sections such as an import table.
语义关系
出向analyzesProcess Code Segment
出向kb referenceReference - Inferential exploit attempt detection - Crowdstrike Inc