D3-CA

Certificate Analysis

Description

Analyzing Public Key Infrastructure certificates to detect if they have been misconfigured or spoofed using both network traffic, certificate fields and third-party logs.

Mapped SPARTA techniques

No techniques mapped to this control.

Cross-framework references

Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.

Counters 6 in MITRE ATT&CK Enterprise

T1041 Exfiltration Over C2 Channel
T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol
T1071 Application Layer Protocol
T1071.001 Web Protocols
T1573.002 Asymmetric Cryptography
T1649 Steal or Forge Authentication Certificates

Cite as SafeMode Space, d3fend D3-CA.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description

›Mapped SPARTA techniques

›Cross-framework references

Counters 6 in MITRE ATT&CK Enterprise

Description

Mapped SPARTA techniques

Cross-framework references