MITRE D3FENDdefensive technique

D3-NTF Network Traffic Filtering

Official page ↗
Tactic
Isolate

Definition

Restricting network traffic originating from any location.

Related

Counters · MITRE ATT&CK (124)

  • T0895 Autorun Image technique
  • T0894 System Binary Proxy Execution technique
  • T0893 Data from Local System technique
  • T1557.003 DHCP Spoofing sub-technique
  • T0821 Modify Controller Tasking technique
  • T0888 Remote System Information Discovery technique
  • T0889 Modify Program technique
  • T0886 Remote Services technique
  • T1542.005 TFTP Boot sub-technique
  • T1205.001 Port Knocking sub-technique
  • T0800 Activate Firmware Update Mode technique
  • T0801 Monitor Process State technique
  • T0802 Automated Collection technique
  • T0806 Brute Force I/O technique
  • T0809 Data Destruction technique
  • T0811 Data from Information Repositories technique
  • T0814 Denial of Service technique
  • T0817 Drive-by Compromise technique
  • T0819 Exploit Public-Facing Application technique
  • T0822 External Remote Services technique
  • T0830 Adversary-in-the-Middle technique
  • T0835 Manipulate I/O Image technique
  • T0836 Modify Parameter technique
  • T0838 Modify Alarm Settings technique
  • T0840 Network Connection Enumeration technique
  • T0842 Network Sniffing technique
  • T0843 Program Download technique
  • T0845 Program Upload technique
  • T0846 Remote System Discovery technique
  • T0848 Rogue Master technique
Show all 124 ›

Child of · MITRE D3FEND (1)

  • D3-NI Network Isolation defensive technique

Referenced by MITRE D3FEND · child of (2)

  • D3-ITF Inbound Traffic Filtering defensive technique
  • D3-OTF Outbound Traffic Filtering defensive technique

References