MITRE D3FENDdefensive technique

D3-NTA Network Traffic Analysis

Official page ↗
Tactic
Detect

Definition

Analyzing intercepted or summarized computer network traffic to detect unauthorized activity.

Related

Referenced by MITRE D3FEND · child of (17)

  • D3-ANAA Administrative Network Activity Analysis defensive technique
  • D3-APCA Application Protocol Command Analysis defensive technique
  • D3-BSE Byte Sequence Emulation defensive technique
  • D3-CA Certificate Analysis defensive technique
  • D3-CAA Connection Attempt Analysis defensive technique
  • D3-CSPP Client-server Payload Profiling defensive technique
  • D3-DNSTA DNS Traffic Analysis defensive technique
  • D3-FC File Carving defensive technique
  • D3-IPCTA IPC Traffic Analysis defensive technique
  • D3-ISVA Inbound Session Volume Analysis defensive technique
  • D3-NTCD Network Traffic Community Deviation defensive technique
  • D3-NTSA Network Traffic Signature Analysis defensive technique
  • D3-PHDURA Per Host Download-Upload Ratio Analysis defensive technique
  • D3-PMAD Protocol Metadata Anomaly Detection defensive technique
  • D3-RPA Relay Pattern Analysis defensive technique
  • D3-RTA RPC Traffic Analysis defensive technique
  • D3-RTSD Remote Terminal Session Detection defensive technique