MITRE D3FENDdefensive technique
D3-FCOA File Content Analysis
- Tactic
- Detect
Definition
Employing a pattern matching algorithm to statically analyze the content of files.
How it works
How it works
Analyzing a piece of code without it being executed in a sandbox, virtual machine, or simulator. Patterns or signatures in the file can indicate whati kind of software it is, including whether it is malware.
Related
Child of · MITRE D3FEND (1)
- D3-FA File Analysis defensive technique
Referenced by MITRE D3FEND · child of (1)
- D3-FCR File Content Rules defensive technique
References
- https://patents.google.com/patent/US10848519B2/ Cyber vaccine and predictive-malware-defense methods and systems