File Integrity Monitoring

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1562.003 Impair Command History Logging; SafeMode's curated mapping records DE-0003.08 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records DE-0003.12 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at low confidence because the supporting chain is two documented edges rather than one source attesting the pair directly, and because DE-0003.12 spans both a ground and a space face while the control reaches only one of them.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records DE-0009.05 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.003 Runtime Data Manipulation; SafeMode's curated mapping records EX-0012.01 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.02 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.003 Runtime Data Manipulation; SafeMode's curated mapping records EX-0012.03 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.04 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.05 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.06 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.07 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.08 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.09 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.10 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.11 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.003 Runtime Data Manipulation; SafeMode's curated mapping records EX-0012.12 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.13 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at low confidence because the supporting chain is two documented edges rather than one source attesting the pair directly, and because EX-0012.13 spans both a ground and a space face while the control reaches only one of them.