MITRE DEFEND™ Technique

The MITRE DEFEND™ Technique object describes the leaf defensive technique ID and/or name associated to a countermeasure, as defined by D3FENDTM Matrix.

Attributes

CaptionNameTypeDescription
Name name String The name of the defensive technique, as defined by D3FENDTM Matrix. For example: IO Port Restriction.
Raw Data raw_data JSON The event data as received from the event source.
Record ID record_id String Unique identifier for the object
Source URL src_url URL String The versioned permalink of the defensive technique, as defined by D3FENDTM Matrix. For example: https://d3fend.mitre.org/technique/d3f:IOPortRestriction/.
Unique ID uid String The unique identifier of the defensive technique, as defined by D3FENDTM Matrix. For example: D3-IOPR.
Unmapped Data unmapped Unmapped[] The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.

Relationships

MITRE DEFEND™ Technique shown in context

Inbound Relationships

These objects and events reference MITRE DEFEND™ Technique in their attributes:

Outbound Relationships

MITRE DEFEND™ Technique references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0