DetectD3-ID
Identifier Analysis
Definition
Analyzing identifier artifacts such as IP address, domain names, or URL(I)s.
- D3FEND ID
- D3-ID
- Tactic
- Detect
- Certification relevance
- CySA+GCIHGCIASecurity+
Sub-techniques
ATT&CK techniques it counters
D3FEND maps this technique to ATT&CK through its sub-techniques; the list combines their mappings.
5 techniques, 10 ATT&CK ids including sub-techniques. Links open MITRE ATT&CK.
- T1114Email Collection
- T1189Drive-by Compromise
- T1204User Execution
- T1534Internal Spearphishing
- T1566Phishing
Marked techniques are also explained, with detection notes and certification relevance, on our interactive ATT&CK map.
Across MITRE's defensive frameworks
Linked through the 5 ATT&CK techniques above.
Detect with CAR
MITRE CAR analytics that cover the same ATT&CK techniques.