DetectD3-FC
File Carving
Definition
Identifying and extracting files from network application protocols through the use of network stream reassembly software.
- D3FEND ID
- D3-FC
- Tactic
- Detect
- Certification relevance
- CySA+GCIHGCIASecurity+
ATT&CK techniques it counters
2 techniques, 3 ATT&CK ids including sub-techniques. Links open MITRE ATT&CK.
Across MITRE's defensive frameworks
Linked through the 2 ATT&CK techniques above.
Detect with CAR
MITRE CAR analytics that cover the same ATT&CK techniques.