MITRE D3FENDdefensive technique

D3-NRAM Network Resource Access Mediation

Official page ↗
Tactic
Isolate
Synonyms
Remote Access Control

Definition

Control of access to organizational systems and services by users or processes over a network.

How it works

How it works Network Resource Access Control involves managing and regulating access to resources within an organization's network. This includes ensuring that only authorized users or processes can access specific systems or data, often through authentication and authorization mechanisms. Examples include accessing internal databases, file servers, or application services.

Related

Counters · MITRE ATT&CK (13)

  • T1074.002 Remote Data Staging sub-technique
  • T1491.002 External Defacement sub-technique
  • T1213.001 Confluence sub-technique
  • T1213.002 Sharepoint sub-technique
  • T1070.005 Network Share Connection Removal sub-technique
  • T1037.003 Network Logon Script sub-technique
  • T1491 Defacement technique
  • T1213 Data from Information Repositories technique
  • T1037 Boot or Logon Initialization Scripts technique
  • T1039 Data from Network Shared Drive technique
  • T1070 Indicator Removal technique
  • T1074 Data Staged technique
  • T1080 Taint Shared Content technique

Child of · MITRE D3FEND (1)

  • D3-AMED Access Mediation defensive technique

Referenced by MITRE D3FEND · child of (2)

  • D3-RFAM Remote File Access Mediation defensive technique
  • D3-WSAM Web Session Access Mediation defensive technique

References