MITRE D3FENDdefensive technique

D3-NTPM Network Traffic Policy Mapping

Official page ↗
Tactic
Model
Synonyms
DLP Policy Mapping, Firewall Mapping, IPS Policy Mapping, Web Security Gateway Policy Mapping

Definition

Network traffic policy mapping identifies and models the allowed pathways of data at the network, transport, and/or application levels.

Related

Counters · MITRE ATT&CK (12)

  • T1556.009 Conditional Access Policies sub-technique
  • T1548.005 Temporary Elevated Cloud Access sub-technique
  • T1615 Group Policy Discovery technique
  • T1134.005 SID-History Injection sub-technique
  • T1552.006 Group Policy Preferences sub-technique
  • T1556 Modify Authentication Process technique
  • T1552 Unsecured Credentials technique
  • T1548 Abuse Elevation Control Mechanism technique
  • T1548.001 Setuid and Setgid sub-technique
  • T1484 Domain or Tenant Policy Modification technique
  • T1222 File and Directory Permissions Modification technique
  • T1134 Access Token Manipulation technique

Child of · MITRE D3FEND (1)

  • D3-NM Network Mapping defensive technique

References