What MITRE D3FEND D3-EF: Email Filtering (Defensive Tactic - Isolate -> Email Filtering) requires
MITRE D3FEND D3-EF (Email Filtering) is a Isolate defensive technique. Filtering incoming email traffic based on specific criteria. Mail filters can be implemented to scan inbound email messages at the initial SMTP connection stage to detect and reject email containing spam and malware. This technique is distinct from d3f:EmailDeletion because it prevents an email from reaching an user's inbox. This technique can also be used for outbound email traffic. In the D3FEND model it filters the email. It counters ATT&CK techniques T1114.001, T1534, T1566.001, T1566.002. Via the Center for Threat-Informed Defense mapping of the countered techniques, it supports NIST SP 800-53 Rev 5 controls AC-03, AC-04, AC-16, AC-17, AC-19, AC-20, CA-07, CM-02.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://d3fend.mitre.org/technique/d3f:EmailFiltering/
SHA-256 integrity: 73c92ae128b6756064ac2e5e9c85b08776baf93d10be46f2f89eb2b27d32543e
Primary Citations — 7 traced to source
- MITRE D3FEND Defensive Technique D3-EF: Email Filtering (https://d3fend.mitre.org/technique/d3f:EmailFiltering/)
- MITRE D3FEND Isolate Tactic (https://d3fend.mitre.org/tactic/d3f:Isolate/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-d3fend-d3-ef-email-filtering.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-d3fend-d3-ef-email-filtering.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-d3fend-d3-ef-email-filtering
- Back to registry: Browse all 10,085 compliance nodes