MITRE D3FEND™
d3fend
The MITRE D3FEND™ object describes the tactic, technique & sub-technique associated with a countermeasure.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| MITRE DEFEND™ Tactic | d3f_tactic |
MITRE D3FEND™ Tactic[] | The Tactic object describes the tactic ID and/or name that is associated with a countermeasure. |
| MITRE DEFEND™ Technique | d3f_technique |
MITRE DEFEND™ Technique[] | The Technique object describes the technique ID and/or name associated with a countermeasure. |
| Raw Data | raw_data |
JSON |
Group:contextThe event data as received from the event source. |
| Record ID | record_id |
String |
Group:primaryUnique identifier for the object |
| Unmapped | unmapped |
Unmapped[] | Data from the source that was not mapped into the schema. |
| Version | version |
String | The D3FEND™ Matrix version. |
Relationships
Inbound Relationships
These objects and events reference MITRE D3FEND™ in their attributes:
- Network Remediation Activity
- Remediation Activity
- File Remediation Activity
- Process Remediation Activity
Outbound Relationships
MITRE D3FEND™ references the following objects and events in its attributes:
This page describes ocsf-1.4.0
Updated 3 days ago