MITRE D3FEND API

MITRE D3FEND API

MITRE D3FEND, at d3fend.mitre.org, is an NSA Cybersecurity Directorate-funded ontology of cybersecurity countermeasures mapped to ATT&CK techniques, published via a keyless JSON-LD API and ontology downloads. A live technique query confirms the service (d3f:Hardware-basedProcessIsolation).

Coverage

Cybersecurity countermeasures mapped to MITRE ATT&CK techniques, confirmed live today via a technique query (d3f:Hardware-basedProcessIsolation). Embedded MITRE ATT&CK, ATLAS and Aerospace SPARTA content keeps its own separate terms (ATT&CK's quoted below). History start and update frequency: Not stated.

Verdict

Keyless JSON-LD API (plus ontology downloads) for MITRE D3FEND's countermeasures mapped to ATT&CK techniques, funded by the NSA Cybersecurity Directorate (confirmed live today via a technique query, d3f:Hardware-basedProcessIsolation). Licensed Custom: the D3FEND Terms of Use say: "The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use D3FEND for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." Embedded ATT&CK content keeps its own terms: "MITRE ATT&CK content is subject to the MITRE ATT&CK terms of use." Rate limits: Not stated. Signal Lab links only.