~/talk

MITRE D3FEND

Talkat BSides London 2021 · on Saturday, 2021-11-13· [security]
links:none on file
slides:none on file

MITRE D3FEND is a beta defender framework that maps over 232 artifacts to more than 100 countermeasures and links to MITRE ATT&CK techniques (example: T1059.001 PowerShell execution) so teams can see exact detections and mitigations. Pages show definitions, strong password policy with NIST SP 800‑63‑3 references, process‑termination guidance, and implementation links (Microsoft, Red Hat). It supports testing via Red Canary Atomic Red Team and shows deceptive options (honeypot patent) so defenders can pick, implement and verify specific controls.

AI-written summary · about

  1. 0:00Introduction to MITRE D3FEND
  2. 3:40What is D3FEND framework
  3. 5:25Exploring strong password policy
  4. 7:33Artifacts and their relationships
  5. 9:40Practical use cases for D3FEND
  6. 12:45Summary and future of D3FEND
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.