Enum: AttackBypassedDefense

A defensive tool, method or process that a technique can get past, in the spellings the ADM lists.

URI: attack:AttackBypassedDefense

Permissible Values

Value	Meaning	Description
Anti Virus	None
Anti-virus	None
Application Control	None
Application control	None
Application whitelisting	None
Autoruns Analysis	None
Binary Analysis	None
Data Execution Prevention	None
Defensive network service scanning	None
Digital Certificate Validation	None
Encryption	None
Exploit Prevention	None
File Monitoring	None
File monitoring	None
File system access controls	None
Firewall	None
Gatekeeper	None
Heuristic Detection	None
Heuristic detection	None
Host Forensic Analysis	None
Host forensic analysis	None
Host Intrusion Prevention Systems	None
Host intrusion prevention systems	None
Log Analysis	None
Log analysis	None
Logon Credentials	None
Multi-Factor Authentication	None
Network Intrusion Detection System	None
Network intrusion detection system	None
Notarization	None
Process whitelisting	None
Signature-based Detection	None
Signature-based detection	None
Static File Analysis	None
System Access Controls	None
System access controls	None
User Mode Signature Validation	None
Web Content Filters	None
Whitelisting by file name or path	None
Windows User Account Control	None

Slots

Name	Description
x_mitre_defense_bypassed	The defenses a defense-evasion technique can get past

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

LinkML Source

name: AttackBypassedDefense
description: A defensive tool, method or process that a technique can get past, in
  the spellings the ADM lists.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
permissible_values:
  Anti Virus:
    text: Anti Virus
  Anti-virus:
    text: Anti-virus
  Application Control:
    text: Application Control
  Application control:
    text: Application control
  Application whitelisting:
    text: Application whitelisting
  Autoruns Analysis:
    text: Autoruns Analysis
  Binary Analysis:
    text: Binary Analysis
  Data Execution Prevention:
    text: Data Execution Prevention
  Defensive network service scanning:
    text: Defensive network service scanning
  Digital Certificate Validation:
    text: Digital Certificate Validation
  Encryption:
    text: Encryption
  Exploit Prevention:
    text: Exploit Prevention
  File Monitoring:
    text: File Monitoring
  File monitoring:
    text: File monitoring
  File system access controls:
    text: File system access controls
  Firewall:
    text: Firewall
  Gatekeeper:
    text: Gatekeeper
  Heuristic Detection:
    text: Heuristic Detection
  Heuristic detection:
    text: Heuristic detection
  Host Forensic Analysis:
    text: Host Forensic Analysis
  Host forensic analysis:
    text: Host forensic analysis
  Host Intrusion Prevention Systems:
    text: Host Intrusion Prevention Systems
  Host intrusion prevention systems:
    text: Host intrusion prevention systems
  Log Analysis:
    text: Log Analysis
  Log analysis:
    text: Log analysis
  Logon Credentials:
    text: Logon Credentials
  Multi-Factor Authentication:
    text: Multi-Factor Authentication
  Network Intrusion Detection System:
    text: Network Intrusion Detection System
  Network intrusion detection system:
    text: Network intrusion detection system
  Notarization:
    text: Notarization
  Process whitelisting:
    text: Process whitelisting
  Signature-based Detection:
    text: Signature-based Detection
  Signature-based detection:
    text: Signature-based detection
  Static File Analysis:
    text: Static File Analysis
  System Access Controls:
    text: System Access Controls
  System access controls:
    text: System access controls
  User Mode Signature Validation:
    text: User Mode Signature Validation
  Web Content Filters:
    text: Web Content Filters
  Whitelisting by file name or path:
    text: Whitelisting by file name or path
  Windows User Account Control:
    text: Windows User Account Control