D3FEND — Model

When to Use

• Building or auditing asset inventories (hardware, software, network, data)
• Mapping network topology and logical/physical links
• Running vulnerability assessments and enumerating exposures
• Modeling operational dependencies and service mappings
• Assessing organizational cyber risk posture
• Analyzing container images and configurations

When NOT to Use

• Implementing hardening controls → d3fend-harden
• Designing detection rules or monitoring → d3fend-detect
• Network segmentation or access mediation → d3fend-isolate
• Incident response or eviction actions → d3fend-evict
• General enterprise security program design → cybersecurity