D3-PUM
Platform Uptime Monitoring
Definition
Monitor the amount of time since the last power cycle or restart.
How it works
Monitoring the time since the last power cycle or restart alerts operators to unexpected restarts and their frequency. This can indicate potential issues or malicious activity, and provides valuable information for forensic investigations.
Considerations
The source of the variable may be mutable depending on the platform, and the provenance of the value.
Artifact Relationships
This defensive technique relates to specific digital artifacts.