D3FEND is the defensive counterpart to ATT&CK. It describes what defenders can do to detect, isolate, deceive, evict, harden, and recover from each attack technique. Use it to map defenses to specific adversary behaviors.