Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| DiginotarCompromise | Fisher, D. (2012, October 31). Final Report on DigiNotar Hack Shows Total Compromise of CA Servers. Retrieved March 6, 2017. |
| DigitalShadows CDN | Swisscom & Digital Shadows. (2017, September 6). Content Delivery Networks (CDNs) Can Leave You Exposed – How You Might Be Affected And What You Can Do About It. Retrieved October 20, 2020. |
| Dingledine Tor The Second-Generation Onion Router | Roger Dingledine, Nick Mathewson and Paul Syverson. (2004). Tor: The Second-Generation Onion Router. Retrieved December 21, 2017. |
| Directory Services Internals DPAPI Backup Keys Oct 2015 | Grafnetter, M. (2015, October 26). Retrieving DPAPI Backup Keys from Active Directory. Retrieved December 19, 2017. |
| Disable_Win_Event_Logging | dmcxblue. (n.d.). Disable Windows Event Logging. Retrieved September 10, 2021. |
| Discord Intro to Webhooks | D. (n.d.). Intro to Webhooks. Retrieved July 20, 2023. |
| Diskshadow | Microsoft Windows Server. (2023, February 3). Diskshadow. Retrieved November 21, 2023. |
| District Court of NY APT10 Indictment December 2018 | US District Court Southern District of New York. (2018, December 17). United States v. Zhu Hua Indictment. Retrieved December 17, 2020. |
| Docker API | Docker. (n.d.). Docker Engine API v1.41 Reference. Retrieved March 31, 2021. |
| Docker Bind Mounts | Docker. (n.d.). Use Bind Mounts. Retrieved March 30, 2021. |
| Docker Build Image | Docker. ( null). Docker Engine API v1.41 Reference - Build an Image. Retrieved March 30, 2021. |
| Docker Container | DockerDocs. (n.d.). Retrieved December 8, 2025. |
| Docker Daemon CLI | Docker. (n.d.). DockerD CLI. Retrieved March 29, 2021. |
| Docker Desktop CLI | dockerdocs. (n.d.). Use the Docker Desktop CLI. Retrieved October 21, 2025. |
| Docker Entrypoint | Docker. (n.d.). Docker run reference. Retrieved March 29, 2021. |
| Docker Exec | Docker. (n.d.). Docker Exec. Retrieved March 29, 2021. |
| Docker Overview | Docker. (n.d.). Docker Overview. Retrieved March 30, 2021. |
| Docker Systemd | Docker. (n.d.). Start containers automatically. Retrieved February 15, 2024. |
| Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026 | DomainTools Investigations. (2026, April 6). Handala: MOIS Linked Cyber Influence Ecosystem Threat Intelligence Assessment. Retrieved April 20, 2026. |
| DomainTools WinterVivern 2021 | Chad Anderson. (2021, April 27). Winter Vivern: A Look At Re-Crafted Government MalDocs Targeting Multiple Languages. Retrieved July 29, 2024. |
| Domain_Steal_CC | Krebs, B. (2018, November 13). That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards. Retrieved September 20, 2019. |
| Donut Github | TheWover. (2019, May 9). donut. Retrieved March 25, 2022. |
| Double Timestomping | Matthew Dunwoody. (2022, April 28). I have seen double-timestomping ITW, including by APT29. Stay sharp out there.. Retrieved June 20, 2024. |
| Dragos 2025 Year in Review | Dragos. (2026, February). 9TH ANNUAL YEAR IN REVIEW | OT/ICS CYBERSECURITY REPORT . Retrieved April 26, 2026. |
| Dragos Apr 2019 | Joe Slowik. (2019, April 10). Implications of IT Ransomware for ICS Environments. Retrieved October 27, 2019. |
| Dragos Crashoverride 2017 | Dragos Inc.. (2017, June 13). CRASHOVERRIDE Analysis of the Threat to Electric Grid Operations. Retrieved December 18, 2020. |
| Dragos Crashoverride 2018 | Joe Slowik. (2018, October 12). Anatomy of an Attack: Detecting and Defeating CRASHOVERRIDE. Retrieved December 18, 2020. |
| Dragos DYMALLOY | Dragos. (n.d.). DYMALLOY. Retrieved August 20, 2020. |
| Dragos EKANS | Dragos. (2020, February 3). EKANS Ransomware and ICS Operations. Retrieved February 9, 2021. |
| Dragos ELECTRUM JAN 2026 | https://5943619.hs-sites.com/hubfs/Reports/dragos-2025-poland-attack-report.pdf. (2026, January). ELECTRUM: CYBER ATTACK ON POLAND’S ELECTRIC SYSTEM 2025. Retrieved April 22, 2026. |
| Dragos FROSTYGOOP 2024 | Mark Graham, Carolyn Ahlers, Kyle O'Meara; Dragos. (2024, July). Impact of FrostyGoop ICS Malware on Connected OT Systems. Retrieved November 20, 2024. |
| Dragos Heroku Watering Hole | Kent Backman. (2021, May 18). When Intrusions Don’t Align: A New Water Watering Hole and Oldsmar. Retrieved August 18, 2022. |
| Dragos Hexane | Dragos. (n.d.). Hexane. Retrieved October 27, 2019. |
| Dragos PARISITE | Dragos. (n.d.). PARISITE. Retrieved December 21, 2020. |
| Dragos SYLVANITE MuddyWater Electrum March 2026 | Dragos. (2026, March 24). Dragos 2026 OT Cybersecurity Report: Year in Review, O&G and Petrochemicals Focus. Retrieved April 17, 2026. |
| Dragos TALONITE | Dragos. (null). TALONITE. Retrieved February 25, 2021. |
| Dragos Threat Report 2020 | Dragos. (n.d.). ICS Cybersecurity Year in Review 2020. Retrieved February 25, 2021. |
| Dragos WASSONITE | Dragos. (n.d.). WASSONITE. Retrieved January 20, 2021. |
| Dragos YIR 2021 | Dragos. (2022). 2021 ICS Cybersecurity Year in Review. Retrieved November 21, 2024. |
| Dragos-Sandworm-Ukraine-2022 | Dragos, Inc.. (2023, December 11). ELECTRUM Targeted Ukrainian Electric Entity Using Custom Tools and CaddyWiper Malware, October 2022. Retrieved March 28, 2024. |
| Drakonia HInvoke | drakonia. (2022, August 10). HInvoke and avoiding PInvoke. Retrieved August 22, 2022. |
| Dropbox Malware Sync | David Talbot. (2013, August 21). Dropbox and Similar Services Can Sync Malware. Retrieved May 31, 2023. |
| DuplicateToken function | Microsoft. (2021, October 12). DuplicateToken function (securitybaseapi.h). Retrieved January 8, 2024. |
| DustySky | ClearSky. (2016, January 7). Operation DustySky. Retrieved January 8, 2016. |
| DustySky2 | ClearSky Cybersecurity. (2016, June 9). Operation DustySky - Part 2. Retrieved August 3, 2016. |
| EC2 Instance Connect | AWS. (2023, June 2). Connect using EC2 Instance Connect. Retrieved June 2, 2023. |
| EFF China GitHub Attack | Budington, B. (2015, April 2). China Uses Unencrypted Websites to Hijack Browsers in GitHub Attack. Retrieved September 1, 2023. |
| EFF Manul Aug 2016 | Galperin, E., Et al.. (2016, August). I Got a Letter From the Government the Other Day.... Retrieved April 25, 2018. |
| EK Clueless Agents | Riordan, J., Schneier, B. (1998, June 18). Environmental Key Generation towards Clueless Agents. Retrieved January 18, 2019. |
| EK Impeding Malware Analysis | Song, C., et al. (2012, August 7). Impeding Automated Malware Analysis with Environment-sensitive Malware. Retrieved January 18, 2019. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
