Esc
Watchdog Timer (WDT) for Evasion - DE-0003.11
(SPARTA Technique)
Definition
By modifying watchdog parameters or who “pets” them, an adversary shapes what evidence survives. Extending or disabling timeouts allows long-running processes to operate without forced resets that would expose abnormal CPU or power usage; conversely, shortening windows or relocating the petting source to a low-level ISR can induce frequent resets that wipe volatile traces, break correlation in logs, and explain anomalies as “spurious reboots.” In both directions, the watchdog becomes a timing tool for hiding activity rather than a guardrail against it.
D3FEND Inferred Relationships
Browse the D3FEND knowledge graph by clicking on the nodes below.