D3FEND 防御矩阵
建模 · 加固 · 检测 · 隔离 · 欺骗 · 驱逐 · 恢复
版本 1.5.0防御技术 272ATT&CK 映射 5989搜索命中上下文 2
Model
4 类
Asset Inventory
D3-AI
Network Mapping
D3-NM
Operational Activity Mapping
D3-OAM
System Mapping
D3-SYSM
Harden
6 类
Agent Authentication
D3-AA
Application Hardening
D3-AH
Credential Hardening
D3-CH
Message Hardening
D3-MH
Platform Hardening
D3-PH
Source Code Hardening
D3-SCH
Detect
8 类
File Analysis
D3-FA
Identifier Analysis
D3-ID
Message Analysis
D3-MA
Network Traffic Analysis
D3-NTA
Physical Access Monitoring
D3-PHAM
Platform Monitoring
D3-PM
Process Analysis
D3-PA
User Behavior Analysis
D3-UBA
Isolate
5 类
Access Mediation
D3-AMED
Access Policy Administration
D3-APA
Content Filtering
D3-CF
Execution Isolation
D3-EI
Network Isolation
D3-NI
Deceive
2 类
Decoy Environment
D3-DE
Decoy Object
D3-DO
Evict
3 类
Credential Eviction
D3-CE
Object Eviction
D3-OE
Process Eviction
D3-PE
Restore
2 类
Restore Access
D3-RA
Restore Object
D3-RO