MITRE D3FENDdefensive technique
D3-RD Restore Database
- Tactic
- Restore
Definition
Restoring the data in a database.
Related
Counters · MITRE ATT&CK (33)
- T0894 System Binary Proxy Execution technique
- T1218.014 MMC sub-technique
- T1614.001 System Language Discovery sub-technique
- T1213.003 Code Repositories sub-technique
- T1614 System Location Discovery technique
- T1564.005 Hidden File System sub-technique
- T1546.015 Component Object Model Hijacking sub-technique
- T1564.003 Hidden Window sub-technique
- T1564 Hide Artifacts technique
- T1003.004 LSA Secrets sub-technique
- T1555.001 Keychain sub-technique
- T1555.002 Securityd Memory sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1003.002 Security Account Manager sub-technique
- T1003.008 /etc/passwd and /etc/shadow sub-technique
- T1555 Credentials from Password Stores technique
- T1552 Unsecured Credentials technique
- T1552.002 Credentials in Registry sub-technique
- T1548 Abuse Elevation Control Mechanism technique
- T1548.004 Elevated Execution with Prompt sub-technique
- T1546.012 Image File Execution Options Injection sub-technique
- T1546 Event Triggered Execution technique
- T1543.003 Windows Service sub-technique
- T1543 Create or Modify System Process technique
- T1137.006 Add-ins sub-technique
- T1207 Rogue Domain Controller technique
- T1213 Data from Information Repositories technique
- T1218 System Binary Proxy Execution technique
- T1137 Office Application Startup technique
- T1003 OS Credential Dumping technique
Child of · MITRE D3FEND (1)
- D3-RO Restore Object defensive technique
References
- https://www.cisa.gov/sites/default/files/publications/Federal_Government_Cybersecurity_Incident_and_Vulnerability_Response_Playbooks_508C.pdf Cybersecurity Incident & Vulnerability Response Playbooks