MITRE D3FENDdefensive technique
D3-FMVV File Metadata Value Verification
- Tactic
- Isolate
Definition
The process of checking specific static values within a file, such as file signatures or magic numbers, to ensure they match the expected values defined by the file format specification.
Related
Child of · MITRE D3FEND (1)
- D3-FFV File Format Verification defensive technique
Referenced by MITRE D3FEND · child of (1)
- D3-FMBV File Magic Byte Verification defensive technique
References
- https://www.sciencedirect.com/science/article/pii/S1742287607000369?viewFullText=true#sec4 Carving Contiguous and Fragmented Files with Fast Object Validation
- https://core.ac.uk/download/pdf/326762883.pdf Introductory Computer Forensics