MITRE D3FENDdefensive technique

D3-PM Platform Monitoring

Official page ↗
Tactic
Detect

Definition

Monitoring platform components such as operating systems software, hardware devices, or firmware.

How it works

Platform monitoring consists of the analysis and monitoring of system level devices and low-level components, including hardware devices, to detect unauthorized modifications or suspicious activity. Monitored platform components includes system files and embedded devices such as: • Kernel software modules • Boot process code and load logic • Operating system components and device files • System libraries and dynamically loaded files • Hardware device drivers • Embedded firmware devices

Related

Referenced by MITRE D3FEND · child of (9)

  • D3-APM Application Performance Monitoring defensive technique
  • D3-FBA Firmware Behavior Analysis defensive technique
  • D3-FEMC Firmware Embedded Monitoring Code defensive technique
  • D3-FIM File Integrity Monitoring defensive technique
  • D3-FV Firmware Verification defensive technique
  • D3-OMM Operating Mode Monitoring defensive technique
  • D3-OPM Operational Process Monitoring defensive technique
  • D3-OSM Operating System Monitoring defensive technique
  • D3-PUM Platform Uptime Monitoring defensive technique