Web Session Activity Analysis

Description

Monitoring changes in user web session behavior by comparing current web session activity to a baseline behavior profile or a catalog of predetermined malicious behavior.

Technical Details

Framework	MITRE D3FEND
Ontology URI	d3f:WebSessionActivityAnalysis
Local Identifier	WebSessionActivityAnalysis
Publication Status	Published on D3FEND website

Relationships

Parent Tactics

D3-UBA User Behavior Analysis
Detect Detect

Related Techniques

D3-RAPA Resource Access Pattern Analysis
D3-ANET Authentication Event Thresholding
D3-UDTA User Data Transfer Analysis
D3-DAM Domain Account Monitoring
D3-JFAPA Job Function Access Pattern Analysis
D3-AZET Authorization Event Thresholding
D3-LAM Local Account Monitoring
D3-UGLPA User Geolocation Logon Pattern Analysis
D3-CCSA Credential Compromise Scope Analysis
D3-SDA Session Duration Analysis
D3-IAA Identifier Activity Analysis
D3-ISVA Inbound Session Volume Analysis

References

For the official documentation and additional resources, visit the MITRE D3FEND website.

View on MITRE D3FEND