D3-FIM

File Integrity Monitoring Restoration

Use file integrity monitoring baselines to identify and restore modified system files.

D3FEND / Restore

Implementation

  • Baseline critical files before deployment
  • Alert on unauthorized changes
  • Maintain file version history
  • Automate restoration procedures
  • Integrate with change management

Tools

  • Tripwire
  • OSSEC
  • Wazuh
  • Carbon Black
  • Qualys FIM

ATT&CK mappings

3

MITRE D3FEND ↗