Skip to main content
Cyber Defense TacticsCyber Defense Tactics
HomeLearnResourcesBlogCommunity
Cyber Defense TacticsCyber Defense Tactics

Learn defensive security, leverage AI for cyber defense, and join a community of security professionals.

Learning

  • Blog
  • Resources
  • Newsletter

Community

  • Community
  • YouTube
  • About

Legal

  • Privacy Policy
  • Terms of Service

© 2026 Cyber Defense Tactics. All rights reserved.

A Carbene.AI Project

Back to D3FEND Hub
D3-SYSRB

System Rebuild

Restore Tactic

Rebuild compromised systems from known-good images to ensure complete removal of adversary presence.

View on MITRE D3FEND

Implementation Guidance

  • Maintain golden images
  • Automate system provisioning
  • Document system configurations
  • Validate rebuilt systems
  • Preserve forensic evidence first

Tools & Technologies

Microsoft SCCMAnsibleTerraformPackerKubernetes

ATT&CK Techniques Countered

This defensive technique helps protect against the following adversary techniques:

T1547

Boot or Logon Autostart Execution

Explore Purple Team Matrix for full mappings

Related Techniques in Restore

D3-BU

Backup and Recovery

D3-RSDW

Restore Service from Disaster Recovery

D3-FIM

File Integrity Monitoring Restoration

Ready to build a comprehensive defense strategy?