misp-galaxy/galaxies/mitre-d3fend.json

{
  "description": "A knowledge graph of cybersecurity countermeasures.",
  "icon": "user-shield",
  "kill_chain_order": {
    "Deceive": [
      "Decoy-Environment",
      "Decoy-Object"
    ],
    "Detect": [
      "File-Analysis",
      "Identifier-Analysis",
      "Message-Analysis",
      "Network-Traffic-Analysis",
      "Platform-Monitoring",
      "Process-Analysis",
      "User-Behavior-Analysis"
    ],
    "Evict": [
      "Credential-Eviction",
      "File-Eviction",
      "Process-Eviction"
    ],
    "Harden": [
      "Application-Hardening",
      "Credential-Hardening",
      "Message-Hardening",
      "Platform-Hardening"
    ],
    "Isolate": [
      "Execution-Isolation",
      "Network-Isolation"
    ],
    "Model": [
      "Asset-Inventory",
      "Network-Mapping",
      "Operational-Activity-Mapping",
      "System-Mapping"
    ],
    "Restore": [
      "Restore-Access",
      "Restore-Object"
    ]
  },
  "name": "MITRE D3FEND",
  "namespace": "mitre",
  "type": "mitre-d3fend",
  "uuid": "77d1bbfa-2982-4e0a-9238-1dae4a48c5b4",
  "version": 1
}