safemode.space
← MITRE D3FEND (Defensive Techniques)
D3-HR
enhancement

Host Reboot

Parent: D3-PE

Description

Initiating a host's reboot sequence to terminate all running processes.

Mapped SPARTA techniques

3 techniques

  • EX-0003Modify Authentication ProcessST0004
    addresses
    low

    Derived by composition, not from a source that names this pair. D3FEND publishes that Host Reboot counters T1556 Modify Authentication Process; SafeMode's curated mapping records EX-0003 as addressing that same adversary behaviour in the space domain. A commanded reset is a normal spacecraft recovery action, so terminating running state by reboot applies on-board. Recorded at low confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

  • LM-0007Credentialed TraversalST0007
    addresses
    low

    Derived by composition, not from a source that names this pair. D3FEND publishes that Host Reboot counters T1550 Use Alternate Authentication Material; SafeMode's curated mapping records LM-0007 as addressing that same adversary behaviour in the space domain. A commanded reset is a normal spacecraft recovery action, so terminating running state by reboot applies on-board. Recorded at low confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

  • PER-0004Replace Cryptographic KeysST0005
    addresses
    low

    Derived by composition, not from a source that names this pair. D3FEND publishes that Host Reboot counters T1556 Modify Authentication Process; SafeMode's curated mapping records PER-0004 as addressing that same adversary behaviour in the space domain. A commanded reset is a normal spacecraft recovery action, so terminating running state by reboot applies on-board. Recorded at low confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.

Cross-framework references

Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.

Counters 14 in MITRE ATT&CK Enterprise

Cite as SafeMode Space, d3fend D3-HR.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.