DetectD3-CA
Certificate Analysis
Definition
Analyzing Public Key Infrastructure certificates to detect if they have been misconfigured or spoofed using both network traffic, certificate fields and third-party logs.
- D3FEND ID
- D3-CA
- Tactic
- Detect
- Certification relevance
- CySA+GCIHGCIASecurity+
Sub-techniques
ATT&CK techniques it counters
5 techniques, 12 ATT&CK ids including sub-techniques. Links open MITRE ATT&CK.