Description
Collecting authorization events, creating a baseline user profile, and determining whether authorization events are consistent with the baseline profile.
Technical Details
| Framework | MITRE D3FEND |
| Ontology URI | d3f:AuthorizationEventThresholding |
| Local Identifier | AuthorizationEventThresholding |
| Publication Status | Published on D3FEND website |
Relationships
Parent Tactics
- D3-UBA User Behavior Analysis
References
For the official documentation and additional resources, visit the MITRE D3FEND website.
View on MITRE D3FEND