MITRE D3FENDdefensive technique

D3-RS Restore Software

Official page ↗
Tactic
Restore

Definition

Restoring software to a host.

Related

Counters · MITRE ATT&CK (46)

  • T0894 System Binary Proxy Execution technique
  • T1649 Steal or Forge Authentication Certificates technique
  • T1218.014 MMC sub-technique
  • T1505.004 IIS Components sub-technique
  • T0889 Modify Program technique
  • T1542.004 ROMMONkit sub-technique
  • T1564.006 Run Virtual Instance sub-technique
  • T0811 Data from Information Repositories technique
  • T0817 Drive-by Compromise technique
  • T0843 Program Download technique
  • T0845 Program Upload technique
  • T0851 Rootkit technique
  • T0873 Project File Infection technique
  • T1127.001 MSBuild sub-technique
  • T1574.005 Executable Installer File Permissions Weakness sub-technique
  • T1574 Hijack Execution Flow technique
  • T1574.010 Services File Permissions Weakness sub-technique
  • T1195.001 Compromise Software Dependencies and Development Tools sub-technique
  • T1195.002 Compromise Software Supply Chain sub-technique
  • T1497.003 Time Based Checks sub-technique
  • T1564 Hide Artifacts technique
  • T1056.003 Web Portal Capture sub-technique
  • T1554 Compromise Host Software Binary technique
  • T1546.011 Application Shimming sub-technique
  • T1547.008 LSASS Driver sub-technique
  • T1547 Boot or Logon Autostart Execution technique
  • T1546 Event Triggered Execution technique
  • T1542.001 System Firmware sub-technique
  • T1542.002 Component Firmware sub-technique
  • T1542.003 Bootkit sub-technique
Show all 46 ›

Child of · MITRE D3FEND (1)

  • D3-RO Restore Object defensive technique

References