MITRE D3FEND™

d3fend

The MITRE D3FEND™ object describes the tactic & technique associated with a countermeasure.

Attributes

Caption	Name	Type	Description
MITRE D3FEND™ Tactic	`d3f_tactic`	MITRE D3FEND™ Tactic[]	The Tactic object describes the tactic ID and/or name that is associated with a countermeasure.
MITRE D3FEND™ Technique	`d3f_technique`	MITRE D3FEND™ Technique[]	The Technique object describes the technique ID and/or name associated with a countermeasure.
Raw Data	`raw_data`	JSON	Group:`context` The event data as received from the event source.
Record ID	`record_id`	String	Group:`primary` Unique identifier for the object
Unmapped	`unmapped`	Unmapped[]	Data from the source that was not mapped into the schema.
Version	`version`	String	The D3FEND™ Matrix version.

These objects and events reference MITRE D3FEND™ in their attributes:

MITRE D3FEND™ references the following objects and events in its attributes:

This page describes qdm-1.5.1+ocsf-1.6.0