Integrate D3FEND with broader cybersecurity ecosystem and frameworks. ATT&CK-D3FEND bidirectional mappings - each D3FEND defensive technique is mapped to ATT&CK offensive techniques it counters + each ATT&CK offensive technique maps to D3FEND defensive techniques that detect/prevent/respond to it. Machine-readable JSON/STIX exports. D3FEND Mapper tool for creating custom mappings. D3FEND-Decompose for breaking down techniques into atomic operations. Integration with MITRE ATT&CK + MITRE CWE (Common Weakness Enumeration) for vulnerability classification + MITRE CVE for vulnerability tracking + MITRE CAPEC (Common Attack Pattern Enumeration) for attack patterns + MITRE EMB3D for embedded device threat modelling. Cross-walks to NIST Cybersecurity Framework 2.0 (mapping techniques to Identify + Protect + Detect + Respond + Recover + Govern functions) + NIST 800-53 + NIST 800-160 + NIST 800-61 + ISO/IEC 27001 Annex A + ISO/IEC 27034 application security + ISO/IEC TS 27110 + CIS Critical Security Controls v8 + CISA Cybersecurity Performance Goals (CPG) + CISA Zero Trust Maturity Model. Threat intelligence integration via STIX 2.x / TAXII 2.x + OpenC2 (Open Command and Control) for automated security orchestration + CACAO (Collaborative Automated Course of Action Operations) for playbooks. Tool integrations with EDR (CrowdStrike + Microsoft Defender + SentinelOne) + SIEM (Splunk + Sentinel + QRadar) + SOAR (Cortex XSOAR + Splunk Phantom + Tines) + GRC platforms.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.