D3-AVE

Asset Vulnerability Enumeration

Identify and catalog vulnerabilities across assets to prioritize remediation and understand exposure to known attacks.

D3FEND / Model

Implementation

  • Schedule regular vulnerability scans
  • Integrate with patch management
  • Prioritize by CVSS score and exploitability
  • Track remediation timelines
  • Correlate with threat intelligence

Tools

  • Nessus
  • Qualys VMDR
  • Rapid7 InsightVM
  • OpenVAS
  • Microsoft Defender Vulnerability Management

ATT&CK mappings

3

MITRE D3FEND ↗