MITRE D3FENDdefensive technique

D3-FH File Hashing

Official page ↗
Tactic
Detect

Definition

Employing file hash comparisons to detect known malware.

How it works

How it works This technique requires a list of hashes to compare a file against. Considerations Performance on large files or very large numbers of files.

Related

Child of · MITRE D3FEND (1)

  • D3-FA File Analysis defensive technique

References