Nimble
Cybersecurity

MITRE D3FEND Countermeasure Ontology

mitre.d3fend@1.3.0

Defensive technique ontology that pairs with offensive ATT&CK knowledge.

publishedMITRE-TERMS Verified publisher 1,490 installs

Content is not redistributed by the Marketplace

This package provides mappings, metadata and integration scaffolding only. Obtain the underlying content directly from MITRE under its own licence.

Go to source

Overview

D3FEND is published as an OWL ontology of defensive techniques and digital artifacts, ideal for reasoning about which countermeasures a twin already implements.

What's inside

ontology

  • d3fend.owl

documentation

  • README.md
  • ATTRIBUTION.md

Artifact types

Ontology· Ontologies

Dependencies

Version history

  • v1.3.0latestNimble ≥ 1.0.08/29/2026

    Current release.

  • v0.9.0Nimble ≥ 1.0.01/31/2026

    Initial public preview.

Manifest

Nimble consumes this machine-readable manifest when resolving and installing the package.

{
  "package": {
    "id": "mitre.d3fend",
    "name": "MITRE D3FEND Countermeasure Ontology",
    "version": "1.3.0",
    "status": "published"
  },
  "publisher": {
    "name": "MITRE",
    "type": "non-profit"
  },
  "domains": [
    "cybersecurity"
  ],
  "solution_areas": [
    "security-architecture",
    "cyber-operations"
  ],
  "artifacts": [
    "ontology"
  ],
  "dependencies": [
    {
      "id": "nimble.cyber.core",
      "version": ">=1.0.0",
      "optional": false
    }
  ],
  "compatibility": {
    "nimble": {
      "minimum": "1.0.0",
      "maximum": null
    }
  },
  "license": {
    "type": "MITRE-TERMS",
    "name": "MITRE Terms of Use",
    "url": "https://www.mitre.org/legal-terms-of-use",
    "redistribution": "bundled",
    "attribution_required": true,
    "attribution": "MITRE D3FEND, copyright The MITRE Corporation.",
    "source_authority": "MITRE",
    "source_url": "https://d3fend.mitre.org"
  },
  "validation": {
    "security": "scanned",
    "validation": "validated"
  },
  "contents": {
    "ontology": [
      "d3fend.owl"
    ],
    "documentation": [
      "README.md",
      "ATTRIBUTION.md"
    ]
  },
  "distribution": {
    "available": false,
    "reason": "bundled"
  }
}