Compliance Node Overview
MITRE D3FEND D3-CE (Credential Eviction) is a defensive technique that disables or removes compromised credentials from a computer network. Distinct from D3-CRO Credential Rotation (CE removes; CRO replaces). Counters ATT&CK T1078 (Valid Accounts) all sub-techniques, T1098 (Account Manipulation), T1134 (Access Token Manipulation), T1550 (Use Alternate Authentication Material). Required under NIST SP 800-53 IA-5 + AC-2, ISO 27001 A.5.16/A.5.18.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://d3fend.mitre.org/technique/d3f:CredentialEviction/
SHA-256 integrity: 832124318139a36bc505c0754e36e2dbdaa2b8c08e34eb6b236a7cacaac45086
Primary Citations — 8 traced to source
- MITRE D3FEND D3-CE: Credential Eviction (https://d3fend.mitre.org/technique/d3f:CredentialEviction/)
- NIST SP 800-53 Rev 5: AC-2 Account Management, IA-5 Authenticator Management
+ 6 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.