MITRE D3FENDdefensive technique
D3-LLM Logical Link Mapping
- Tactic
- Model
Definition
Logical link mapping creates a model of existing or previous node-to-node connections using network-layer data or metadata.
Related
Counters · MITRE ATT&CK (15)
- T0864 Transient Cyber Asset technique
- T1578.003 Delete Cloud Instance sub-technique
- T1578.004 Revert Cloud Instance sub-technique
- T0809 Data Destruction technique
- T0816 Device Restart/Shutdown technique
- T0848 Rogue Master technique
- T0866 Exploitation of Remote Services technique
- T0867 Lateral Tool Transfer technique
- T1578.002 Create Cloud Instance sub-technique
- T1114.002 Remote Email Collection sub-technique
- T1505.003 Web Shell sub-technique
- T1505.002 Transport Agent sub-technique
- T1578 Modify Cloud Compute Infrastructure technique
- T1505 Server Software Component technique
- T1114 Email Collection technique
Child of · MITRE D3FEND (1)
- D3-NM Network Mapping defensive technique
References
- https://docs.librenms.org/Extensions/Network-Map/ Libre NMS - Network Map Extension