M1037Filter Network Traffic
Varsayilan-reddet filtreleme, cikis (egress) kontrolu ve anti-spoofing (uRPF/BCP38) ile giris/cikisi kisitlar.
ZT: verify explicitlyFirewall / Egress FilteringNetworkCloud
TA0011Savunma Planı
Command and Control
Komuta-kontrol iletişimi
M1031Network Intrusion Prevention
Ag trafiginde bilinen kotu desenleri ve anomalileri tespit/engelleyen IDS/IPS, dogru sensor yerlesimiyle.
ZT: assume breachIDS/IPSNetwork
M1021Restrict Web-Based Content
DNS sertlestirme (protective DNS/RPZ + sinkhole) ve web proxy/filtreleme ile cikis kanallarini daraltir.
ZT: verify explicitlyWeb/DNS FilteringWindowsLinuxmacOSNetwork