All frameworks
d3fendversion v0.x

MITRE D3FEND (Defensive Techniques)

Official source

271 controls.

ReferenceFamilyTitle
D3-AAn/aAgent Authentication
D3-ABPIn/aApplication-based Process Isolation
D3-ACAn/aActive Certificate Analysis
D3-ACHn/aApplication Configuration Hardening
D3-AEMn/aApplication Exception Monitoring
D3-AHn/aApplication Hardening
D3-AIn/aAsset Inventory
D3-ALn/aAccount Locking
D3-ALLMn/aActive Logical Link Mapping
D3-AMn/aAccess Modeling
D3-AMEDn/aAccess Mediation
D3-ANAAn/aAdministrative Network Activity Analysis
D3-ANCIn/aAuthentication Cache Invalidation
D3-ANETn/aAuthentication Event Thresholding
D3-APAn/aAccess Policy Administration
D3-APCAn/aApplication Protocol Command Analysis
D3-APLMn/aActive Physical Link Mapping
D3-APMn/aApplication Performance Monitoring
D3-AVEn/aAsset Vulnerability Enumeration
D3-AZETn/aAuthorization Event Thresholding
D3-BAn/aBootloader Authentication
D3-BANn/aBiometric Authentication
D3-BDIn/aBroadcast Domain Isolation
D3-BMAn/aBus Message Authentication
D3-BSEn/aByte Sequence Emulation
D3-CAn/aCertificate Analysis
D3-CAAn/aConnection Attempt Analysis
D3-CBANn/aCertificate-based Authentication
D3-CCSAn/aCredential Compromise Scope Analysis
D3-CDPn/aChange Default Password
D3-CEn/aCredential Eviction
D3-CEROn/aCertificate Rotation
D3-CFn/aContent Filtering
D3-CFCn/aContent Format Conversion
D3-CFIn/aControl Flow Integrity
D3-CHn/aCredential Hardening
D3-CHNn/aConnected Honeynet
D3-CIn/aConfiguration Inventory
D3-CIAn/aContainer Image Analysis
D3-CMn/aContent Modification
D3-CNEn/aContent Excision
D3-CNRn/aContent Rebuild
D3-CNSn/aContent Substitution
D3-CPn/aCertificate Pinning
D3-CQn/aContent Quarantine
D3-CRn/aCredential Revocation
D3-CROn/aCredential Rotation
D3-CSn/aCredential Scrubbing
D3-CSPPn/aClient-server Payload Profiling
D3-CTSn/aCredential Transmission Scoping

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.