What MITRE D3FEND D3-ER: Email Removal (Defensive Tactic - Evict -> Email Removal) requires
MITRE D3FEND D3-ER (Email Removal) is a Evict defensive technique. The email removal technique deletes email files from system storage. Email removal is a technique that can be used to prevent a user from executing malware or responding to phishing attempts. Security software or users themselves may detect malicious or suspicious email in a local or remote mail folder email and then employ this technique. In the D3FEND model it deletes the email. It counters ATT&CK techniques T1114.001, T1114.002, T1505.002, T1534, T1566.001, T1566.002. Via the Center for Threat-Informed Defense mapping of the countered techniques, it supports NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-04, AC-05, AC-06, AC-16, AC-17, AC-19.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://d3fend.mitre.org/technique/d3f:EmailRemoval/
SHA-256 integrity: 5147692012f93328f3a1fb11157526f21320dab180640d392ab168b7ef2f84bd
Primary Citations — 7 traced to source
- MITRE D3FEND Defensive Technique D3-ER: Email Removal (https://d3fend.mitre.org/technique/d3f:EmailRemoval/)
- MITRE D3FEND Evict Tactic (https://d3fend.mitre.org/tactic/d3f:Evict/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access