Description
Comparing a call stack in system memory with a shadow call stack maintained by the processor to determine unauthorized shellcode activity.
Technical Details
| Framework | MITRE D3FEND |
| Ontology URI | d3f:ShadowStackComparisons |
| Local Identifier | ShadowStackComparisons |
| Publication Status | Published on D3FEND website |
Relationships
Parent Tactics
- D3-PA Process Analysis
References
For the official documentation and additional resources, visit the MITRE D3FEND website.
View on MITRE D3FEND