MITRE D3FENDdefensive technique

D3-PUM Platform Uptime Monitoring

Official page ↗
Tactic
Detect

Definition

Monitor the amount of time since the last power cycle or restart.

How it works

How it works Monitoring the time since the last power cycle or restart alerts operators to unexpected restarts and their frequency. This can indicate potential issues or malicious activity, and provides valuable information for forensic investigations. Considerations The source of the variable may be mutable depending on the platform, and the provenance of the value.

Related

Child of · MITRE D3FEND (1)

  • D3-PM Platform Monitoring defensive technique

References