d3fend.json

[{"_key":"d3fend_mitigation_00000","_id":"d3fend_mitigation/d3fend_mitigation_00000","_rev":"_dVfN6Gi---","name":"Active Certificate Analysis","metadata":{"d3fend-id":"D3-ACA"},"original_id":"ActiveCertificateAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00001","_id":"d3fend_mitigation/d3fend_mitigation_00001","_rev":"_dVfN6Gi--_","name":"Application Hardening","metadata":{"d3fend-id":"D3-AH"},"original_id":"ApplicationHardening","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00002","_id":"d3fend_mitigation/d3fend_mitigation_00002","_rev":"_dVfN6Gi--A","name":"Account Locking","metadata":{"d3fend-id":"D3-AL"},"original_id":"AccountLocking","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00003","_id":"d3fend_mitigation/d3fend_mitigation_00003","_rev":"_dVfN6Gi--B","name":"Administrative Network Activity Analysis","metadata":{"d3fend-id":"D3-ANAA"},"original_id":"AdministrativeNetworkActivityAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00004","_id":"d3fend_mitigation/d3fend_mitigation_00004","_rev":"_dVfN6Gi--C","name":"Authentication Cache Invalidation","metadata":{"d3fend-id":"D3-ANCI"},"original_id":"AuthenticationCacheInvalidation","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00005","_id":"d3fend_mitigation/d3fend_mitigation_00005","_rev":"_dVfN6Gi--D","name":"Authentication Event Thresholding","metadata":{"d3fend-id":"D3-ANET"},"original_id":"AuthenticationEventThresholding","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00006","_id":"d3fend_mitigation/d3fend_mitigation_00006","_rev":"_dVfN6Gi--E","name":"Authorization Event Thresholding","metadata":{"d3fend-id":"D3-AZET"},"original_id":"AuthorizationEventThresholding","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00007","_id":"d3fend_mitigation/d3fend_mitigation_00007","_rev":"_dVfN6Gi--F","name":"Bootloader Authentication","metadata":{"d3fend-id":"D3-BA"},"original_id":"BootloaderAuthentication","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00008","_id":"d3fend_mitigation/d3fend_mitigation_00008","_rev":"_dVfN6Gi--G","name":"Broadcast Domain Isolation","metadata":{"d3fend-id":"D3-BDI"},"original_id":"BroadcastDomainIsolation","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00009","_id":"d3fend_mitigation/d3fend_mitigation_00009","_rev":"_dVfN6Gi--H","name":"Byte Sequence Emulation","metadata":{"d3fend-id":"D3-BSE"},"original_id":"ByteSequenceEmulation","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00010","_id":"d3fend_mitigation/d3fend_mitigation_00010","_rev":"_dVfN6Gi--I","name":"Certificate Analysis","metadata":{"d3fend-id":"D3-CA"},"original_id":"CertificateAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00011","_id":"d3fend_mitigation/d3fend_mitigation_00011","_rev":"_dVfN6Gi--J","name":"Connection Attempt Analysis","metadata":{"d3fend-id":"D3-CAA"},"original_id":"ConnectionAttemptAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00012","_id":"d3fend_mitigation/d3fend_mitigation_00012","_rev":"_dVfN6Gi--K","name":"Credential Eviction","metadata":{"d3fend-id":"D3-CE"},"original_id":"CredentialEviction","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00013","_id":"d3fend_mitigation/d3fend_mitigation_00013","_rev":"_dVfN6Gi--L","name":"Credential Hardening","metadata":{"d3fend-id":"D3-CH"},"original_id":"CredentialHardening","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00014","_id":"d3fend_mitigation/d3fend_mitigation_00014","_rev":"_dVfN6Gi--M","name":"Connected Honeynet","metadata":{"d3fend-id":"D3-CHN"},"original_id":"ConnectedHoneynet","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00015","_id":"d3fend_mitigation/d3fend_mitigation_00015","_rev":"_dVfN6Gi--N","name":"Certificate Pinning","metadata":{"d3fend-id":"D3-CP"},"original_id":"CertificatePinning","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00016","_id":"d3fend_mitigation/d3fend_mitigation_00016","_rev":"_dVfN6Gi--O","name":"Client-server Payload Profiling","metadata":{"d3fend-id":"D3-CSPP"},"original_id":"Client-serverPayloadProfiling","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00017","_id":"d3fend_mitigation/d3fend_mitigation_00017","_rev":"_dVfN6Gi--P","name":"Dynamic Analysis","metadata":{"d3fend-id":"D3-DA"},"original_id":"DynamicAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00018","_id":"d3fend_mitigation/d3fend_mitigation_00018","_rev":"_dVfN6Gi--Q","name":"Dead Code Elimination","metadata":{"d3fend-id":"D3-DCE"},"original_id":"DeadCodeElimination","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00019","_id":"d3fend_mitigation/d3fend_mitigation_00019","_rev":"_dVfN6Gi--R","name":"Decoy Environment","metadata":{"d3fend-id":"D3-DE"},"original_id":"DecoyEnvironment","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00020","_id":"d3fend_mitigation/d3fend_mitigation_00020","_rev":"_dVfN6Gi--S","name":"Disk Encryption","metadata":{"d3fend-id":"D3-DENCR"},"original_id":"DiskEncryption","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00021","_id":"d3fend_mitigation/d3fend_mitigation_00021","_rev":"_dVfN6Gi--T","name":"Decoy File","metadata":{"d3fend-id":"D3-DF"},"original_id":"DecoyFile","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00022","_id":"d3fend_mitigation/d3fend_mitigation_00022","_rev":"_dVfN6Gi--U","name":"Driver Load Integrity Checking","metadata":{"d3fend-id":"D3-DLIC"},"original_id":"DriverLoadIntegrityChecking","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00023","_id":"d3fend_mitigation/d3fend_mitigation_00023","_rev":"_dVfN6Gi--V","name":"Decoy Network Resource","metadata":{"d3fend-id":"D3-DNR"},"original_id":"DecoyNetworkResource","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00024","_id":"d3fend_mitigation/d3fend_mitigation_00024","_rev":"_dVfN6Gi--W","name":"DNS Allowlisting","metadata":{"d3fend-id":"D3-DNSAL"},"original_id":"DNSAllowlisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00025","_id":"d3fend_mitigation/d3fend_mitigation_00025","_rev":"_dVfN6Gi--X","name":"DNS Denylisting","metadata":{"d3fend-id":"D3-DNSDL"},"original_id":"DNSDenylisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00026","_id":"d3fend_mitigation/d3fend_mitigation_00026","_rev":"_dVfN6Gi--Y","name":"DNS Traffic Analysis","metadata":{"d3fend-id":"D3-DNSTA"},"original_id":"DNSTrafficAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00027","_id":"d3fend_mitigation/d3fend_mitigation_00027","_rev":"_dVfN6Gi--Z","name":"Decoy Object","metadata":{"d3fend-id":"D3-DO"},"original_id":"DecoyObject","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00028","_id":"d3fend_mitigation/d3fend_mitigation_00028","_rev":"_dVfN6Gi--a","name":"Decoy Persona","metadata":{"d3fend-id":"D3-DP"},"original_id":"DecoyPersona","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00029","_id":"d3fend_mitigation/d3fend_mitigation_00029","_rev":"_dVfN6Gi--b","name":"Decoy Public Release","metadata":{"d3fend-id":"D3-DPR"},"original_id":"DecoyPublicRelease","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00030","_id":"d3fend_mitigation/d3fend_mitigation_00030","_rev":"_dVfN6Gi--c","name":"Database Query String Analysis","metadata":{"d3fend-id":"D3-DQSA"},"original_id":"DatabaseQueryStringAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00031","_id":"d3fend_mitigation/d3fend_mitigation_00031","_rev":"_dVfN6Gi--d","name":"Decoy Session Token","metadata":{"d3fend-id":"D3-DST"},"original_id":"DecoySessionToken","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00032","_id":"d3fend_mitigation/d3fend_mitigation_00032","_rev":"_dVfN6Gi--e","name":"Decoy User Credential","metadata":{"d3fend-id":"D3-DUC"},"original_id":"DecoyUserCredential","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00033","_id":"d3fend_mitigation/d3fend_mitigation_00033","_rev":"_dVfN6Gi--f","name":"Executable Allowlisting","metadata":{"d3fend-id":"D3-EAL"},"original_id":"ExecutableAllowlisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00034","_id":"d3fend_mitigation/d3fend_mitigation_00034","_rev":"_dVfN6Gi--g","name":"Executable Denylisting","metadata":{"d3fend-id":"D3-EDL"},"original_id":"ExecutableDenylisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00035","_id":"d3fend_mitigation/d3fend_mitigation_00035","_rev":"_dVfN6Gi--h","name":"Emulated File Analysis","metadata":{"d3fend-id":"D3-EFA"},"original_id":"EmulatedFileAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00036","_id":"d3fend_mitigation/d3fend_mitigation_00036","_rev":"_dVfN6Gi--i","name":"Endpoint Health Beacon","metadata":{"d3fend-id":"D3-EHB"},"original_id":"EndpointHealthBeacon","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00037","_id":"d3fend_mitigation/d3fend_mitigation_00037","_rev":"_dVfN6Gi--j","name":"Exception Handler Pointer Validation","metadata":{"d3fend-id":"D3-EHPV"},"original_id":"ExceptionHandlerPointerValidation","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00038","_id":"d3fend_mitigation/d3fend_mitigation_00038","_rev":"_dVfN6Gi--k","name":"Execution Isolation","metadata":{"d3fend-id":"D3-EI"},"original_id":"ExecutionIsolation","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00039","_id":"d3fend_mitigation/d3fend_mitigation_00039","_rev":"_dVfN6Gi--l","name":"Encrypted Tunnels","metadata":{"d3fend-id":"D3-ET"},"original_id":"EncryptedTunnels","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00040","_id":"d3fend_mitigation/d3fend_mitigation_00040","_rev":"_dVfN6Gi--m","name":"File Analysis","metadata":{"d3fend-id":"D3-FA"},"original_id":"FileAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00041","_id":"d3fend_mitigation/d3fend_mitigation_00041","_rev":"_dVfN6Gi--n","name":"File Access Pattern Analysis","metadata":{"d3fend-id":"D3-FAPA"},"original_id":"FileAccessPatternAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00042","_id":"d3fend_mitigation/d3fend_mitigation_00042","_rev":"_dVfN6Gi--o","name":"Firmware Behavior Analysis","metadata":{"d3fend-id":"D3-FBA"},"original_id":"FirmwareBehaviorAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00043","_id":"d3fend_mitigation/d3fend_mitigation_00043","_rev":"_dVfN6Gi--p","name":"File Carving","metadata":{"d3fend-id":"D3-FC"},"original_id":"FileCarving","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00044","_id":"d3fend_mitigation/d3fend_mitigation_00044","_rev":"_dVfN6Gi--q","name":"File Content Rules","metadata":{"d3fend-id":"D3-FCR"},"original_id":"FileContentRules","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00045","_id":"d3fend_mitigation/d3fend_mitigation_00045","_rev":"_dVfN6Gi--r","name":"Firmware Embedded Monitoring Code","metadata":{"d3fend-id":"D3-FEMC"},"original_id":"FirmwareEmbeddedMonitoringCode","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00046","_id":"d3fend_mitigation/d3fend_mitigation_00046","_rev":"_dVfN6Gi--s","name":"File Hashing","metadata":{"d3fend-id":"D3-FH"},"original_id":"FileHashing","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00047","_id":"d3fend_mitigation/d3fend_mitigation_00047","_rev":"_dVfN6Gm---","name":"Forward Resolution Domain Denylisting","metadata":{"d3fend-id":"D3-FRDDL"},"original_id":"ForwardResolutionDomainDenylisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00048","_id":"d3fend_mitigation/d3fend_mitigation_00048","_rev":"_dVfN6Gm--_","name":"Forward Resolution IP Denylisting","metadata":{"d3fend-id":"D3-FRIDL"},"original_id":"ForwardResolutionIPDenylisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00049","_id":"d3fend_mitigation/d3fend_mitigation_00049","_rev":"_dVfN6Gm--A","name":"Firmware Verification","metadata":{"d3fend-id":"D3-FV"},"original_id":"FirmwareVerification","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00050","_id":"d3fend_mitigation/d3fend_mitigation_00050","_rev":"_dVfN6Gm--B","name":"Hardware-based Process Isolation","metadata":{"d3fend-id":"D3-HBPI"},"original_id":"Hardware-basedProcessIsolation","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00051","_id":"d3fend_mitigation/d3fend_mitigation_00051","_rev":"_dVfN6Gm--C","name":"Homoglyph Detection","metadata":{"d3fend-id":"D3-HD"},"original_id":"HomoglyphDetection","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00052","_id":"d3fend_mitigation/d3fend_mitigation_00052","_rev":"_dVfN6Gm--D","name":"Hierarchical Domain Denylisting","metadata":{"d3fend-id":"D3-HDDL"},"original_id":"HierarchicalDomainDenylisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00053","_id":"d3fend_mitigation/d3fend_mitigation_00053","_rev":"_dVfN6Gm--E","name":"Homoglyph Denylisting","metadata":{"d3fend-id":"D3-HDL"},"original_id":"HomoglyphDenylisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00054","_id":"d3fend_mitigation/d3fend_mitigation_00054","_rev":"_dVfN6Gm--F","name":"Indirect Branch Call Analysis","metadata":{"d3fend-id":"D3-IBCA"},"original_id":"IndirectBranchCallAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00055","_id":"d3fend_mitigation/d3fend_mitigation_00055","_rev":"_dVfN6Gm--G","name":"Identifier Analysis","metadata":{"d3fend-id":"D3-ID"},"original_id":"IdentifierAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00056","_id":"d3fend_mitigation/d3fend_mitigation_00056","_rev":"_dVfN6Gm--H","name":"Input Device Analysis","metadata":{"d3fend-id":"D3-IDA"},"original_id":"InputDeviceAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00057","_id":"d3fend_mitigation/d3fend_mitigation_00057","_rev":"_dVfN6Gm--I","name":"Integrated Honeynet","metadata":{"d3fend-id":"D3-IHN"},"original_id":"IntegratedHoneynet","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00058","_id":"d3fend_mitigation/d3fend_mitigation_00058","_rev":"_dVfN6Gm--J","name":"IPC Traffic Analysis","metadata":{"d3fend-id":"D3-IPCTA"},"original_id":"IPCTrafficAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00059","_id":"d3fend_mitigation/d3fend_mitigation_00059","_rev":"_dVfN6Gm--K","name":"Inbound Session Volume Analysis","metadata":{"d3fend-id":"D3-ISVA"},"original_id":"InboundSessionVolumeAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00060","_id":"d3fend_mitigation/d3fend_mitigation_00060","_rev":"_dVfN6Gm--L","name":"Inbound Traffic Filtering","metadata":{"d3fend-id":"D3-ITF"},"original_id":"InboundTrafficFiltering","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00061","_id":"d3fend_mitigation/d3fend_mitigation_00061","_rev":"_dVfN6Gm--M","name":"Job Function Access Pattern Analysis","metadata":{"d3fend-id":"D3-JFAPA"},"original_id":"JobFunctionAccessPatternAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00062","_id":"d3fend_mitigation/d3fend_mitigation_00062","_rev":"_dVfN6Gm--N","name":"Local Account Monitoring","metadata":{"d3fend-id":"D3-LAM"},"original_id":"LocalAccountMonitoring","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00063","_id":"d3fend_mitigation/d3fend_mitigation_00063","_rev":"_dVfN6Gm--O","name":"Message Analysis","metadata":{"d3fend-id":"D3-MA"},"original_id":"MessageAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00064","_id":"d3fend_mitigation/d3fend_mitigation_00064","_rev":"_dVfN6Gm--P","name":"Mandatory Access Control","metadata":{"d3fend-id":"D3-MAC"},"original_id":"MandatoryAccessControl","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00065","_id":"d3fend_mitigation/d3fend_mitigation_00065","_rev":"_dVfN6Gm--Q","name":"Message Authentication","metadata":{"d3fend-id":"D3-MAN"},"original_id":"MessageAuthentication","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00066","_id":"d3fend_mitigation/d3fend_mitigation_00066","_rev":"_dVfN6Gm--R","name":"Memory Boundary Tracking","metadata":{"d3fend-id":"D3-MBT"},"original_id":"MemoryBoundaryTracking","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00067","_id":"d3fend_mitigation/d3fend_mitigation_00067","_rev":"_dVfN6Gm--S","name":"Message Encryption","metadata":{"d3fend-id":"D3-MENCR"},"original_id":"MessageEncryption","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00068","_id":"d3fend_mitigation/d3fend_mitigation_00068","_rev":"_dVfN6Gm--T","name":"Multi-factor Authentication","metadata":{"d3fend-id":"D3-MFA"},"original_id":"Multi-factorAuthentication","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00069","_id":"d3fend_mitigation/d3fend_mitigation_00069","_rev":"_dVfN6Gm--U","name":"Message Hardening","metadata":{"d3fend-id":"D3-MH"},"original_id":"MessageHardening","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00070","_id":"d3fend_mitigation/d3fend_mitigation_00070","_rev":"_dVfN6Gm--V","name":"Network Isolation","metadata":{"d3fend-id":"D3-NI"},"original_id":"NetworkIsolation","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00071","_id":"d3fend_mitigation/d3fend_mitigation_00071","_rev":"_dVfN6Gm--W","name":"Network Traffic Analysis","metadata":{"d3fend-id":"D3-NTA"},"original_id":"NetworkTrafficAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00072","_id":"d3fend_mitigation/d3fend_mitigation_00072","_rev":"_dVfN6Gm--X","name":"Network Traffic Community Deviation","metadata":{"d3fend-id":"D3-NTCD"},"original_id":"NetworkTrafficCommunityDeviation","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00073","_id":"d3fend_mitigation/d3fend_mitigation_00073","_rev":"_dVfN6Gm--Y","name":"Operating System Monitoring","metadata":{"d3fend-id":"D3-OSM"},"original_id":"OperatingSystemMonitoring","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00074","_id":"d3fend_mitigation/d3fend_mitigation_00074","_rev":"_dVfN6Gm--Z","name":"Outbound Traffic Filtering","metadata":{"d3fend-id":"D3-OTF"},"original_id":"OutboundTrafficFiltering","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00075","_id":"d3fend_mitigation/d3fend_mitigation_00075","_rev":"_dVfN6Gm--a","name":"One-time Password","metadata":{"d3fend-id":"D3-OTP"},"original_id":"One-timePassword","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00076","_id":"d3fend_mitigation/d3fend_mitigation_00076","_rev":"_dVfN6Gm--b","name":"Process Analysis","metadata":{"d3fend-id":"D3-PA"},"original_id":"ProcessAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00077","_id":"d3fend_mitigation/d3fend_mitigation_00077","_rev":"_dVfN6Gm--c","name":"Pointer Authentication","metadata":{"d3fend-id":"D3-PAN"},"original_id":"PointerAuthentication","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00078","_id":"d3fend_mitigation/d3fend_mitigation_00078","_rev":"_dVfN6Gm--d","name":"Passive Certificate Analysis","metadata":{"d3fend-id":"D3-PCA"},"original_id":"PassiveCertificateAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00079","_id":"d3fend_mitigation/d3fend_mitigation_00079","_rev":"_dVfN6Gm--e","name":"Process Code Segment Verification","metadata":{"d3fend-id":"D3-PCSV"},"original_id":"ProcessCodeSegmentVerification","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00080","_id":"d3fend_mitigation/d3fend_mitigation_00080","_rev":"_dVfN6Gm--f","name":"Process Eviction","metadata":{"d3fend-id":"D3-PE"},"original_id":"ProcessEviction","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00081","_id":"d3fend_mitigation/d3fend_mitigation_00081","_rev":"_dVfN6Gm--g","name":"Platform Hardening","metadata":{"d3fend-id":"D3-PH"},"original_id":"PlatformHardening","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00082","_id":"d3fend_mitigation/d3fend_mitigation_00082","_rev":"_dVfN6Gm--h","name":"Per Host Download-Upload Ratio Analysis","metadata":{"d3fend-id":"D3-PHDURA"},"original_id":"PerHostDownload-UploadRatioAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00083","_id":"d3fend_mitigation/d3fend_mitigation_00083","_rev":"_dVfN6Gm--i","name":"Process Lineage Analysis","metadata":{"d3fend-id":"D3-PLA"},"original_id":"ProcessLineageAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00084","_id":"d3fend_mitigation/d3fend_mitigation_00084","_rev":"_dVfN6Gm--j","name":"Platform Monitoring","metadata":{"d3fend-id":"D3-PM"},"original_id":"PlatformMonitoring","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00085","_id":"d3fend_mitigation/d3fend_mitigation_00085","_rev":"_dVfN6Gm--k","name":"Protocol Metadata Anomaly Detection","metadata":{"d3fend-id":"D3-PMAD"},"original_id":"ProtocolMetadataAnomalyDetection","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00086","_id":"d3fend_mitigation/d3fend_mitigation_00086","_rev":"_dVfN6Gm--l","name":"Process Spawn Analysis","metadata":{"d3fend-id":"D3-PSA"},"original_id":"ProcessSpawnAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00087","_id":"d3fend_mitigation/d3fend_mitigation_00087","_rev":"_dVfN6Gm--m","name":"Process Segment Execution Prevention","metadata":{"d3fend-id":"D3-PSEP"},"original_id":"ProcessSegmentExecutionPrevention","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00088","_id":"d3fend_mitigation/d3fend_mitigation_00088","_rev":"_dVfN6Gm--n","name":"Process Self-Modification Detection","metadata":{"d3fend-id":"D3-PSMD"},"original_id":"ProcessSelf-ModificationDetection","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00089","_id":"d3fend_mitigation/d3fend_mitigation_00089","_rev":"_dVfN6Gm--o","name":"Process Termination","metadata":{"d3fend-id":"D3-PT"},"original_id":"ProcessTermination","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00090","_id":"d3fend_mitigation/d3fend_mitigation_00090","_rev":"_dVfN6Gm--p","name":"Resource Access Pattern Analysis","metadata":{"d3fend-id":"D3-RAPA"},"original_id":"ResourceAccessPatternAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00091","_id":"d3fend_mitigation/d3fend_mitigation_00091","_rev":"_dVfN6Gm--q","name":"RF Shielding","metadata":{"d3fend-id":"D3-RFS"},"original_id":"RFShielding","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00092","_id":"d3fend_mitigation/d3fend_mitigation_00092","_rev":"_dVfN6Gm--r","name":"Relay Pattern Analysis","metadata":{"d3fend-id":"D3-RPA"},"original_id":"RelayPatternAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00093","_id":"d3fend_mitigation/d3fend_mitigation_00093","_rev":"_dVfN6Gm--s","name":"Reverse Resolution Domain Denylisting","metadata":{"d3fend-id":"D3-RRDD"},"original_id":"ReverseResolutionDomainDenylisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00094","_id":"d3fend_mitigation/d3fend_mitigation_00094","_rev":"_dVfN6Gm--t","name":"Reverse Resolution IP Denylisting","metadata":{"d3fend-id":"D3-RRID"},"original_id":"ReverseResolutionIPDenylisting","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00095","_id":"d3fend_mitigation/d3fend_mitigation_00095","_rev":"_dVfN6Gm--u","name":"RPC Traffic Analysis","metadata":{"d3fend-id":"D3-RTA"},"original_id":"RPCTrafficAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00096","_id":"d3fend_mitigation/d3fend_mitigation_00096","_rev":"_dVfN6Gm--v","name":"Remote Terminal Session Detection","metadata":{"d3fend-id":"D3-RTSD"},"original_id":"RemoteTerminalSessionDetection","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00097","_id":"d3fend_mitigation/d3fend_mitigation_00097","_rev":"_dVfN6Gm--w","name":"Segment Address Offset Randomization","metadata":{"d3fend-id":"D3-SAOR"},"original_id":"SegmentAddressOffsetRandomization","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00098","_id":"d3fend_mitigation/d3fend_mitigation_00098","_rev":"_dVfN6Gm--x","name":"Service Binary Verification","metadata":{"d3fend-id":"D3-SBV"},"original_id":"ServiceBinaryVerification","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00099","_id":"d3fend_mitigation/d3fend_mitigation_00099","_rev":"_dVfN6Gm--y","name":"System Call Analysis","metadata":{"d3fend-id":"D3-SCA"},"original_id":"SystemCallAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00100","_id":"d3fend_mitigation/d3fend_mitigation_00100","_rev":"_dVfN6Gm--z","name":"Session Duration Analysis","metadata":{"d3fend-id":"D3-SDA"},"original_id":"SessionDurationAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00101","_id":"d3fend_mitigation/d3fend_mitigation_00101","_rev":"_dVfN6Gm--0","name":"System Daemon Monitoring","metadata":{"d3fend-id":"D3-SDM"},"original_id":"SystemDaemonMonitoring","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00102","_id":"d3fend_mitigation/d3fend_mitigation_00102","_rev":"_dVfN6Gm--1","name":"Script Execution Analysis","metadata":{"d3fend-id":"D3-SEA"},"original_id":"ScriptExecutionAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00103","_id":"d3fend_mitigation/d3fend_mitigation_00103","_rev":"_dVfN6Gm--2","name":"System File Analysis","metadata":{"d3fend-id":"D3-SFA"},"original_id":"SystemFileAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00104","_id":"d3fend_mitigation/d3fend_mitigation_00104","_rev":"_dVfN6Gm--3","name":"Stack Frame Canary Verification","metadata":{"d3fend-id":"D3-SFCV"},"original_id":"StackFrameCanaryVerification","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00105","_id":"d3fend_mitigation/d3fend_mitigation_00105","_rev":"_dVfN6Gm--4","name":"Standalone Honeynet","metadata":{"d3fend-id":"D3-SHN"},"original_id":"StandaloneHoneynet","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00106","_id":"d3fend_mitigation/d3fend_mitigation_00106","_rev":"_dVfN6Gm--5","name":"Scheduled Job Analysis","metadata":{"d3fend-id":"D3-SJA"},"original_id":"ScheduledJobAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00107","_id":"d3fend_mitigation/d3fend_mitigation_00107","_rev":"_dVfN6Gm--6","name":"Sender MTA Reputation Analysis","metadata":{"d3fend-id":"D3-SMRA"},"original_id":"SenderMTAReputationAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00108","_id":"d3fend_mitigation/d3fend_mitigation_00108","_rev":"_dVfN6Gm--7","name":"Strong Password Policy","metadata":{"d3fend-id":"D3-SPP"},"original_id":"StrongPasswordPolicy","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00109","_id":"d3fend_mitigation/d3fend_mitigation_00109","_rev":"_dVfN6Gm--8","name":"Sender Reputation Analysis","metadata":{"d3fend-id":"D3-SRA"},"original_id":"SenderReputationAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00110","_id":"d3fend_mitigation/d3fend_mitigation_00110","_rev":"_dVfN6Gm--9","name":"Shadow Stack Comparisons","metadata":{"d3fend-id":"D3-SSC"},"original_id":"ShadowStackComparisons","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00111","_id":"d3fend_mitigation/d3fend_mitigation_00111","_rev":"_dVfN6Gm-_-","name":"Software Update","metadata":{"d3fend-id":"D3-SU"},"original_id":"SoftwareUpdate","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00112","_id":"d3fend_mitigation/d3fend_mitigation_00112","_rev":"_dVfN6Gm-__","name":"Transfer Agent Authentication","metadata":{"d3fend-id":"D3-TAAN"},"original_id":"TransferAgentAuthentication","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00113","_id":"d3fend_mitigation/d3fend_mitigation_00113","_rev":"_dVfN6Gm-_A","name":"TPM Boot Integrity","metadata":{"d3fend-id":"D3-TBI"},"original_id":"TPMBootIntegrity","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00114","_id":"d3fend_mitigation/d3fend_mitigation_00114","_rev":"_dVfN6Gm-_B","name":"URL Analysis","metadata":{"d3fend-id":"D3-UA"},"original_id":"URLAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00115","_id":"d3fend_mitigation/d3fend_mitigation_00115","_rev":"_dVfN6Gm-_C","name":"User Behavior Analysis","metadata":{"d3fend-id":"D3-UBA"},"original_id":"UserBehaviorAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00116","_id":"d3fend_mitigation/d3fend_mitigation_00116","_rev":"_dVfN6Gm-_D","name":"User Data Transfer Analysis","metadata":{"d3fend-id":"D3-UDTA"},"original_id":"UserDataTransferAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00117","_id":"d3fend_mitigation/d3fend_mitigation_00117","_rev":"_dVfN6Gm-_E","name":"User Geolocation Logon Pattern Analysis","metadata":{"d3fend-id":"D3-UGLPA"},"original_id":"UserGeolocationLogonPatternAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00118","_id":"d3fend_mitigation/d3fend_mitigation_00118","_rev":"_dVfN6Gm-_F","name":"User Session Init Config Analysis","metadata":{"d3fend-id":"D3-USICA"},"original_id":"UserSessionInitConfigAnalysis","datatype":"d3fend_mitigation"},{"_key":"d3fend_mitigation_00119","_id":"d3fend_mitigation/d3fend_mitigation_00119","_rev":"_dVfN6Gm-_G","name":"Web Session Activity Analysis","metadata":{"d3fend-id":"D3-WSAA"},"original_id":"WebSessionActivityAnalysis","datatype":"d3fend_mitigation"}]