MITRE D3FEND™
D3FEND Coverage View
Every ATT&CK technique on this site links to the D3FEND defensive-technique vocabulary that names what kind of analysis its event evidence actually performs.
Detect tactic only: this is GravityLog's own reasoned mapping onto D3FEND's real technique catalog — D3FEND's FAQ states it doesn't prescribe fixed pairings, so treat this as a starting point, not a scraped official list. D3FEND's other six tactics (Harden, Isolate, Deceive, Evict, Restore, Model) describe architecture and response actions a Windows Event Log can't evidence, and aren't attempted here.
GravityLog