MITRE D3FEND™ Learning Center
The deceive tactic is used to advertise, entice, and allow potential attackers access to an observed or controlled environment.
Top-level technique families
These techniques sit directly beneath the Defensive Technique root and organize the more specific techniques in this tactic.
Complete tactic directory
A decoy service, system, or environment, that is connected to the enterprise network, and simulates or emulates certain functionality to the network, without exposing full access to a production system.
A Decoy Environment comprises hosts and networks for the purposes of deceiving an attacker.
A file created for the purposes of deceiving an adversary.
Deploying a network resource for the purposes of deceiving an adversary.
A Decoy Object is created and deployed for the purposes of deceiving attackers.
Establishing a fake online identity to misdirect, deceive, and or interact with adversaries.
Issuing publicly released media to deceive adversaries.
An authentication token created for the purposes of deceiving an adversary.
A Credential created for the purpose of deceiving an adversary.
The practice of setting decoys in a production environment to entice interaction from attackers.
An environment created for the purpose of attracting attackers and eliciting their behaviors that is not connected to any production enterprise systems.
Try a shorter term or clear the filters.
