D3FEND — Isolate

When to Use

• Implementing access mediation (network, file, web session, physical)
• Configuring content filtering and validation (format, metadata, magic bytes)
• Isolating execution (process sandboxing, allowlisting, denylisting)
• Segmenting networks (VLANs, micro-segmentation, broadcast isolation)
• Managing DNS/IP allowlists and denylists
• Setting system call filtering and I/O port restrictions

When NOT to Use

• Building detection rules or monitoring → d3fend-detect
• System hardening or encryption → d3fend-harden
• Honeypots or deception → d3fend-deceive
• Network architecture design → infrastructure-engineer
• Zero-trust implementation → cybersecurity