D3FEND 技术详情
D3-SFA
定义
Monitoring system files such as authentication databases, configuration files, system logs, and system executables for modification or tampering.
父技术
子技术
关联构件
OperatingSystemFile
Operating System File
An operating system file is a file that is part of, or used to store information about, the operating system itself.
语义关系
出向analyzesOperating System File
出向kb referenceReference - CAR-2019-07-001: Access Permission Modification - MITRE
出向kb referenceReference - CAR-2013-01-002: Autorun Differences - MITRE
出向kb referenceReference - CAR-2016-04-002: User Activity from Clearing Event Logs - MITRE