MITRE D3FEND

Defensive techniques mapped against ATT&CK — know how to defend

All 12 techniques Model 27 Harden 55 Detect 90 Isolate 56 Deceive 11 Evict 19 Restore 12
D3-RIC Restore
Reissue Credential
Issue a new credential to a user which supercedes their old credential.
Counters 10 ATT&CK
D3-RA Restore
Restore Access
Restoring an entity's access to resources.
D3-RC Restore
Restore Configuration
Restoring an software configuration.
Counters 24 ATT&CK
D3-RD Restore
Restore Database
Restoring the data in a database.
Counters 15 ATT&CK
D3-RDI Restore
Restore Disk Image
Restoring a previously captured disk image a hard drive.
D3-RE Restore
Restore Email
Restoring an email for an entity to access.
Counters 3 ATT&CK
D3-RF Restore
Restore File
Restoring a file for an entity to access.
Counters 46 ATT&CK
D3-RNA Restore
Restore Network Access
Restoring a entity's access to a computer network.
Counters 3 ATT&CK
D3-RO Restore
Restore Object
Restoring an object for an entity to access. This is the broadest class for object restoral.
D3-RS Restore
Restore Software
Restoring software to a host.
Counters 19 ATT&CK
D3-RUAA Restore
Restore User Account Access
Restoring a user account's access to resources.
Counters 6 ATT&CK
D3-ULA Restore
Unlock Account
Restoring a user account's access to resources by unlocking a locked User Account.
Counters 6 ATT&CK