.svg)
D3FEND
A MITRE framework that maps defensive cybersecurity techniques to known attack patterns, complementing ATT&CK for blue team operations.
D3FEND is a knowledge graph of cybersecurity countermeasures developed by MITRE and funded by the NSA. It provides a structured framework for defensive techniques that can be mapped directly to offensive techniques catalogued in MITRE ATT&CK. D3FEND enables security architects and engineers to design defenses that specifically counter known adversary behaviors, creating a more threat-informed and measurable security posture. The framework covers techniques across categories including harden, detect, isolate, deceive, and evict. CyberUp24 integrates D3FEND into its Threat-Informed Defense Design engagements to help organizations build measurable, adversary-aligned defenses.
Related terms
SOAR (Security Orchestration, Automation and Response)
Technology that automates security workflows, orchestrates tools, and accelerates incident response — transforming manual SOC tasks into intelligent, repeatable processes.
Read full description
%201.svg)
S
s
SIEM (Security Information and Event Management)
A platform that aggregates and analyzes security data from across an organization's environment to detect threats and generate alerts in real time.
Read full description
S
s
Vulnerability Scanning
Automated identification and analysis of security weaknesses in systems, networks, and applications to prioritize remediation efforts.
Read full description
V
v
Zero Trust
A security model based on the principle of never trust always verify — requiring continuous authentication and authorization for every user device and connection regardless of location.
Read full description
Z
z
Threat Hunting
A proactive security practice where analysts actively search for hidden threats and adversaries within an organization's environment before alerts are triggered.
Read full description
T
t
SOAR (Security Orchestration Automation and Response)
Technology that automates security workflows, orchestrates tools, and accelerates incident response — transforming manual SOC tasks into intelligent, repeatable processes.
Read full description
S
s
