D3FEND 技术详情
D3-SDM
定义
Tracking changes to the state or configuration of critical system level processes.
父技术
子技术
无
关联构件
OperatingSystemProcess
Operating System Process
An operating system process, or system process, is a process running to perform operating system functions.
语义关系
出向kb referenceReference - Host intrusion prevention system using software and user behavior analysis - Sophos Ltd
出向kb referenceReference - Method using kernel mode assistance for the detection and removal of threats which are actively preventing detection and removal from a running system - Symantec Corporation
出向kb referenceReference - CAR-2016-04-003: User Activity from Stopping Windows Defensive Services - MITRE
出向monitorsOperating System Process