Vendredi 16 Octobre 2026 22:22:29 GMT+02:00
Netcrook
WIKICROOK - D
TERMES TECHNIQUES
D.lgs. 51/2018Italian framework for personal-data processing in law-enforcement contexts.D2Ddirect-to-device connectivity that links non-terrestrial systems with consumer devices.DaaSDesktop-as-a-Service, a model where virtual desktops are hosted and managed as a cloud service.DaemonSetA Kubernetes workload that runs one pod on each node, often used for security agents.DAMDatabase Activity Monitoring, the collection and analysis of database actions for visibility, compliance, and threat detection.Damage management recordsrecords identified by the listing as exposed.Damages claimA request for compensation tied to a perceived loss or harm.Dangerous-goods documentationoperational paperwork for handling regulated cargo safely and in compliance.Dangerous-goods recordsdocuments tied to hazardous cargo handling and safety controls.Dangling DNSA DNS record that still points to a resource or service that no longer exists or is no longer owned.Dangling DNS recordA DNS entry that still points to a removed or deprovisioned resource.Dark leak sitea public-facing site used to publish stolen data or extortion messages.Dark modea display setting that uses darker colors for interface elements.Dark web extortion portalA leak site used to pressure victims after alleged theft.Dark web marketAn underground marketplace used to trade illicit goods and services.Dark web marketplaceAn illicit online market where stolen data, credentials, and other illegal goods are bought and sold.Dark-web marketplaceAn online trading space, often hidden from normal search, where stolen data and other illicit goods may be sold.Dark-web monitoringA breach-alerting feature that checks whether account-related data appears in leaked datasets.Data access governancePolicies and controls that decide who can see specific data.Data analyticsThe use of data to identify patterns, trends, and anomalies that are hard to see in raw records.Data availabilitythe ability to access information and services when they are needed.Data blockingan undefined label that may describe interference, but whose meaning depends on context.Data Center deploymentA self-managed enterprise installation model that usually requires direct patching by the operator.Data center efficiencyHow effectively a facility converts electricity into computing work, including the cost of cooling and operations.Data Center revenueSales tied to servers and infrastructure used for AI and cloud computing workloads.Data centreThe physical infrastructure that houses servers, storage, cooling, and network systems for digital services.Data collectionThe act of gathering files, logs, configs, or other useful artifacts from a system for later use.Data completenessThe degree to which required information is present and usable.Data consistencyThe degree to which the same information matches across forms, systems, and records.Data continuitythe preservation of accurate information from one lifecycle stage to the next.Data ContractA machine-verifiable agreement about what a dataset should contain and how it should behave.Data disclosureUnauthorized exposure of information from memory or files that should not be visible to an attacker.Data discoveryThe process of finding and mapping sensitive data across an organization’s systems.Data engineeringThe technical work of collecting, transforming, and preparing data for analysis.Data environmentThe systems, storage, and services where an organization keeps and processes information.Data exchangedInformation shared between users, teams, or systems inside a platform.Data exfiltration claiman assertion that files were taken, which still needs verification.Data extractionUnauthorized copying or export of information from a system.Data flow mapA description of how information moves through a system, including storage, access, and retention points.Data flow mappingthe process of tracing where information goes inside and outside a system.Data flow monitoringTracking how information moves between users, devices, and external services.Data in UseInformation actively being processed by a system, rather than stored on disk or moving over a network.Data ingestionthe process of collecting and importing data into a system or pipeline.Data intelligencesoftware that aggregates and analyzes large datasets to support investigation or decision-making.Data layoutBackground term for how information is arranged in memory.Data leak claiman allegation that files were stolen or published, not always independently verified.Data Leak MonitoringTools that scan for exposed personal information and alert users when data may have surfaced publicly.Data leak threata coercive promise to publish information unless demands are met.Data loggingSaving measurements over time so they can be reviewed later.Data necessityThe principle that data should be used only when it is needed for a defined purpose.Data opacitylimited visibility into how platforms measure, rank, or value content use.Data parsingThe process of turning structured input into usable information.Data pathThe route information follows as it moves through a system from storage to delivery.Data preparationThe cleaning, reshaping, and combining of raw data before analysis or reporting.Data preservationThe practice of keeping information accessible over time, even after a platform changes or shuts down.Data processing chainthe sequence of parties and steps involved in handling personal data.Data processora party that processes personal data on behalf of the controller.Data profilingThe analysis of personal data to infer behavior, preferences, or identity details.Data protection by designbuilding privacy safeguards into a product before deployment.Data protection lawRules governing the collection, storage, transfer, and processing of personal data.Data protection platformSoftware used to control, secure, and monitor sensitive information.Data reconciliationThe comparison of records across systems to keep them consistent after changes or retirement.Data remanenceResidual information that remains on storage after deletion or reallocation and may still be recoverable.Data representationThe structured form that turns real-world events into inputs an AI system can process.Data resiliencethe capacity to keep data available and reliable during disruption.Data retention controlsPolicies and technical settings that determine what the system stores, for how long, and whether users can delete it.Data roomA controlled repository for documents shared during a transaction or review.Data samplea small set of files used to support a theft claim.Data scienceMethods for collecting, cleaning, analyzing, and modeling data to support decisions or automated systems.Data ScopeThe set of files, systems, and records that may have been accessed during an incident.Data scopingLimiting which datasets a model or workflow can access to reduce exposure and misuse risk.Data scrapingAutomated collection of information from web pages or portal content at scale.Data securityThe practice of protecting sensitive information from unauthorized access, loss, or misuse.Data segregationSeparating sensitive records from general business systems to reduce blast radius.Data sharingthe controlled exchange of information between participants or systems.Data SpaceA governed environment for data sharing that emphasizes controlled access, privacy, and common interoperability rules.Data SpacesGoverned environments for sharing data across organizations while preserving interoperability and control.Data sprawlthe uncontrolled spread of copies across files, devices, and services.Data strategythe plan for collecting, managing, and using data across an organization.Data subjectthe individual whose personal data is being collected, processed, or reviewed.Data surfaceThe collection of data flows, storage points, and handling processes that can create security risk.Data theft campaignAn intrusion focused on stealing information rather than disrupting service.Data theft incidentAn event in which information is suspected to have been taken or accessed without authorization.Data timera countdown marker shown on some extortion listings.Data transfer restrictiona legal or technical limit on moving data to another party.Data transparencyHow clearly a service explains what data it collects and how it is used.Data triagesorting stolen files by sensitivity or value to prioritize coercion.Data visibilityThe ability to locate, identify, and monitor where data is stored and how it is used.Data volumeA size figure that may describe files, but its exact meaning is not always clear.Data volume claimA stated amount of allegedly stolen data that may not be verified.Data volume markercounts or size figures used to signal alleged impact.Data warehouse exportA dataset exported from a data warehouse environment.Data-centric monitoringA security approach that focuses on activity around sensitive information and its access patterns.Data-centric securityA protection approach that follows the data itself, regardless of where it is stored or transmitted.Data-leak activityThreat actor threats or actions involving stolen data publication for pressure.Data-leak vectora route attackers can use to pull sensitive information from a system.Data-processing boundaryThe point at which information is handled by a vendor, cloud service, or internal system, often shaping privacy and security risk.Data-stealing malwareMalware designed to collect and exfiltrate sensitive information from a device.Database attackan intrusion or abuse path aimed at stored records or backend access.Database backupa copy of stored data that can reveal broad internal records if stolen.Database dumpA copied set of records taken from a system and often used in extortion or resale.Database exfiltrationThe unauthorized copying of data out of a database.Database grantsPermissions that define what a database user can do.Database migrationA structured change to stored data or schema during a software upgrade.Database poolingSharing infrastructure across multiple databases so idle capacity can be reused instead of reserved per system.Database programmingUsing database features to express logic, not just store records.Database repairA recovery step that attempts to fix damaged or inconsistent data structures.Database rootThe highest administrative identity in a database system.Database schema migrationA structural database update that can rewrite data and complicate rollback planning.Database scriptscode that can reveal how internal data systems are structured.Database snapshota point-in-time copy of data that can preserve sensitive records or credentials.Database systemThe layer where structured data is stored, queried, and managed.Datacenter GPUa graphics processor originally used in server or datacenter environments.Datacentre optimizationA program that aims to improve cloud or infrastructure efficiency, often by reducing waste and improving governance.DatapathThe packet-processing path that matches traffic and applies forwarding actions.DataplaneThe traffic-processing side of a network device that handles packets and forwarding decisions.Dataset censusThe process of identifying and listing datasets held by an organization.Dataset inventoryA structured record of the data sources, licenses, and restrictions used in training.Dataset linkingcombining multiple data sources to reveal identities or sensitive patterns.Dataset-processing pipelineThe sequence that loads, transforms, and prepares data for use.Dataset-processing vulnerabilitya weakness in data-loading or data-handling code that can create security exposure.DataverseMicrosoft’s data layer for business records used by Dynamics 365 and Power Platform.Dataverse tablesCloud data tables that can become exposed if access rules are too open.Date codea marking that indicates when a component was manufactured.DawnChromium’s implementation layer for WebGPU, translating browser graphics requests into native GPU operations.DAXThe formula language used in Power BI to write calculations, measures, and business logic.Day 2 tokenomicsThe ongoing cost and efficiency of running AI systems after initial deployment.Daybreak BlueA controlled access tier used for limited testing of advanced model behavior.Daybreak platformOpenAI’s platform name for the expanded access offering mentioned in the announcement.Db2IBM’s database platform used to store and process structured data in enterprise environments.DC circuitA direct-current path used in solar systems, often requiring careful isolation before maintenance.DCF77A German long-wave time signal broadcast at 77.5 kHz.DCIMData Center Infrastructure Management, software and processes for tracking capacity, energy, and operations inside a data center.DCRatA Windows remote access trojan family used for operator-controlled malicious activity.DCSDistributed Control System, a platform used to manage complex industrial operations across multiple controllers.DCSyncA directory replication technique that can be abused to request sensitive credential data from Active Directory.DDL Concorrenzaa competition bill used to amend or clarify parts of Italy’s regulatory framework.DDoS attackA distributed denial-of-service attack that overwhelms a target with traffic or requests so legitimate users cannot access it.DDoS botnetA network of compromised devices controlled to generate distributed traffic for denial-of-service attacks.DDR4A common memory standard whose configuration properties matter in this reported technique.DDR5a memory standard whose traffic can become a target when physical access is available.De-agingA broad term for efforts aimed at reducing age-related biological changes.De-linked dataData processed so it is separated from direct user identity markers.De-riskingA compliance choice to limit or end relationships judged too risky.Deactivation CriteriaPredefined conditions for disabling or restricting a system when risk or misuse crosses a threshold.Dead Drop ResolverA covert method where malware and operators exchange data through a trusted third-party service.Dead reckoningEstimating position from course, speed, and elapsed time when external signals are unreliable.Deadline messagingpublic urgency used to increase pressure on a target or audience.Deadline pressurea tactic that narrows response time to increase urgency.Deadline timera fixed time intended to heighten urgency for the target.DeadlockA state where two or more execution paths wait on each other’s resources and no progress is possible.Deal flowthe movement of business opportunities through meetings, demos, and negotiations.DeauthenticationA wireless denial-of-service action that breaks the connection between a device and its access point.Deauthentication AttackA Wi-Fi disruption technique that forces devices off a network by sending forged disconnect frames.Debit card programThe set of terms that govern how a card is issued, used, and charged.DebounceA method for filtering noisy button signals so one press is read correctly.Debt held by the publicU.S. government debt owned outside federal accounts, a key measure of sovereign borrowing burden.Debug loggingDetailed diagnostic output that can accidentally store sensitive user input or metadata.Debug modea state that DDRop may force Intel TDX confidential VMs into, enabling memory exposure in the reported attack.Debuggera tool used to inspect program behavior while code is running on real hardware.Decentralized architectureA design that spreads control and routing across many nodes rather than one server.Decentralized decision-makinga model in which local teams can make certain decisions without waiting for central approval.Decentralized exchangeA trading platform that runs through blockchain-based logic rather than a central operator.Decentralized IdentityAn identity model that distributes trust across issuers, holders, and verifiers.Decentralized infrastructureA distributed setup that avoids dependence on one central host.Decentralized networka group structure without a single central command point.Deception technologySecurity controls that use fake or monitored assets to study attacker behavior.Deceptive alignmentA case where compliance is only apparent, not genuine.Deceptive appsoftware that misrepresents its purpose, value, or behavior to users.Deceptive associationA misleading impression that a brand and an event are formally connected.Deceptive recovery offera false promise of help designed to lure victims into payment.DECIDE-AIa guideline for early clinical evaluation of AI decision-support systems.Decision AssuranceEvidence and review practices that help show how an AI-influenced decision was made and approved.Decision fatigueReduced judgment quality after many repeated decisions or reviews.Decision flowThe path an AI system follows from input data to output or action.Decision integrityThe security property that a system’s outputs are not improperly manipulated.Decision LedgerA log of human decisions made during exceptions, used to improve future versions of a process map.Decision lineA practical boundary that separates decisions AI may make, decisions it may advise on, and decisions that must remain human-led.Decision LoggingRecords that preserve what the system did, when it did it, and who approved it.Decision makersThe people who influence or approve a purchase in a business setting.Decision modelAn AI system that returns a bounded choice or score instead of open-ended text.Decision Model and Notation (DMN)A standard for representing business decisions in a structured and auditable form.Decision ParalysisDelayed or stalled decision-making caused by too many options or too much uncertainty.Decision platformSoftware that ranks operational choices by priority, impact, or risk.Decision rulesThe policies or control logic that shape what an AI system can do.Decision signalModel output that is used to trigger or guide a follow-on action in a workflow.Decision windowthe short period during which a response can still change the outcome.Decision-making centerthe place where final authority sits for investment, design, procurement, and program direction.Decision-making infrastructurethe data, systems, and procedures used to support operational choices.Decisioning LayerThe control layer that decides what an AI system may access or execute.Decoder pathThe specific code branch that interprets an input file format, often a high-value target when handling untrusted files.DecodingThe generation process that controls how a model turns probabilities into text.DecompositionBreaking a complex task into smaller parts that are easier to understand and manage.DecompressionThe process of restoring compressed data to its original form, often while parsing attacker-controlled input.Decompression stubThe built-in code that extracts files from an SFX package and starts execution.Decontextualized contentMaterial shared without its original setting, making it easier to misread or weaponize.Decoy endpointA deceptive service or target meant to mislead an automated system into bad decisions.Decoy installerA legitimate setup file included to make a malicious package look harmless.Decreto Fintechan Italian legal framework linked to digital financial services and tokenized market models.Decreto legislativo 179/2026The Italian implementing decree discussed here, tied to the adaptation of national rules to the EU AI framework.Decrypt samplea partial file offered to suggest recovery capability.Decryption keya credential or artifact used to unlock encrypted files.Decryption keystools that unlock encrypted files, but claims about them require verification.Dedicated VPSA virtual private server reserved for one customer or organization.Deep LinkA link that opens an app or assistant with pre-filled context or parameters.Deep neural networkA machine learning model with multiple layers that learns patterns through distributed parameters.Deep ResearchA Copilot feature for structured research-style output that is being retired in the consumer app.Deep techcompanies built on advanced scientific or engineering research.Deep useAI applied to judgment-heavy work with context, review, and feedback.Deep-space communicationsSystems used to send data across extreme distances with long delay.Deepfake detectionSecurity controls that attempt to identify AI-generated or manipulated audio and video.Deepfake scama fraud attempt that uses synthetic audio or video to impersonate a real person.Deepfake websiteA fake or impersonated site designed to look legitimate enough to pass casual inspection.DEERSDefense Enrollment Eligibility Reporting System, a centralized repository used for personnel and medical data support.DEETA commonly used comparison point for insect repellents.Default access credentialsFactory-set usernames and passwords that remain a common attack surface if not changed.Default assistantThe built-in voice or AI helper a device uses unless the user changes it.Default behaviorThe settings or actions a system uses before a person changes them.Default enrollmentA policy state where users are included unless they actively change a setting.Default policyA preset behavior that applies unless an administrator changes it.Default privacyA setting that makes accounts or interactions private unless the user changes them.Default protectionsSafety settings applied automatically without requiring users to enable them manually.Default stateThe setting a feature has before a user changes it.Default trust biasThe human tendency to accept familiar or urgent cues too easily.Default-denyA security model where everything is blocked unless it is explicitly allowed.Defender AntivirusMicrosoft’s built-in antivirus component for Windows environments.Defender automationThe use of automated tools to help security teams triage, validate, and respond faster.Defender exclusionA security setting that tells Microsoft Defender to skip scanning certain files or paths.Defender-only accessA control pattern that restricts a security tool or model to verified defensive users.Defense contractorA company that provides goods or services to defense organizations.Defense Industrial BaseThe contractor ecosystem that supplies goods and services to the U.S. defense establishment.Defense Manpower Data Center (DMDC)A DoD personnel data center that holds central personnel records and related identity information.Defense rightsthe protections that allow a party to contest a decision.Defense-tech ecosystemthe network of companies, labs, suppliers, and agencies building defense capability.Defensive assuranceevidence that security controls or services work as intended.Defensive cyber researchSecurity work focused on testing, validation, and resilience rather than harm.Defensive fitHow well a tool or control matches a specific environment, workflow, or risk profile.Defensive playbookA predefined response plan that helps teams react consistently during security incidents.Defensive resilienceThe ability of a system to continue operating, recover quickly, or fail safely under attack.Defensive workflowThe routine used by security teams to turn information into action.Deferred paymentA payment method where the charge is settled at a later time.Deferred RevenueRevenue collected in advance but not yet recognized in earnings.Definer’s-rights procedureA routine that runs with the privileges of its owner, not the caller.Definitive accertamentothe final finding that can start a procedural deadline.Definitive EditionA release label that usually signals a fuller packaged version of a game.DefragmentationA disk maintenance method that reorganizes file fragments to improve access efficiency.Defrost CycleA programmed interval that clears ice buildup in cooling equipment; changing it can affect temperature stability.Degraded Mode OperationsPreplanned fallback procedures that keep critical functions running when normal digital systems are unavailable.Degraded operationsLimited business functioning used when full service is not available.Degraded performanceA service still works, but more slowly or unreliably than expected.Degraded servicereduced functionality that still leaves some parts of a platform working.Deindexingremoving a page from search results without deleting the underlying webpage.Delegation boundaryThe line between AI-only tasks, human-reviewed tasks, and human-only work.Delegation chainThe sequence showing how authority moves from one identity or system to another.Delegation of authorityThe rule set that defines who may approve specific business actions.DelistingRemoval of a company from a stock exchange, which can change public-market visibility and reporting obligations.Delivery chainThe sequence of steps used to move a payload from a lure to execution on a victim device.Delivery evidenceproof that a message was sent and received within a controlled messaging system.Delivery gapA failure in timing, format, or routing that keeps useful intelligence from reaching the right person.Delivery-themed lurea scam message that imitates parcel or shipment notifications.Delta plotterA plotting machine that uses a delta-style motion layout instead of straight X-Y axes.Demand ResponseA system that changes electricity use in response to grid conditions or price signals.Demand validationA process for checking whether real buyers exist before major investment.Demilitarized Zone (DMZ)A buffer network that separates sensitive systems from less trusted or external connections.Democratic scrutinyPublic or institutional oversight of major technology decisions through transparency and accountability.Demographic changeShifts in population structure, such as aging societies and changing workforce composition.Demonstrated performanceevidence of what a person can actually do on the job.Demurragecharges tied to delays in loading or unloading cargo.Denial-of-walletA cost attack where repeated requests drive cloud spending upward.Deno runtimeA JavaScript and TypeScript runtime used to execute code outside the browser, with permission-based security controls.DeobfuscationThe process of undoing obfuscation to recover clearer program behavior.DepenalizationA legal shift that reduces or removes criminal penalties for certain conduct.DependabotGitHub automation that opens pull requests to update dependencies in a repository.dependabot.ymlThe repository configuration file that controls Dependabot behavior.DependenciesTechnical or business links that require one component to work before another can function correctly.Dependency auditingChecking third-party packages and libraries for known vulnerabilities, risky versions, or supply-chain issues.Dependency boundaryThe line between trusted core code and external components brought into a build.Dependency changeAny update to a software component that can affect downstream workflows.Dependency intakeThe stage where a package is chosen and admitted into a project or build workflow.Dependency RelationshipA record showing how one software component relies on another inside a product.Dependency timelinethe order in which a dependency was published, installed, or updated in a system.Dependency transparencyThe ability to see the software, service, or hardware components a system relies on.Dependency visibilityThe ability to identify and track the external components a system relies on.DeployersOrganizations that use an AI system in a real-world setting and may have disclosure duties of their own.Deployment boundaryThe technical line between different installation modes that changes exposure to a flaw.Deployment conditionsThe real-world environment in which a system or idea must operate successfully.Deployment decisionThe internal choice to release, delay, or block a model after reviewing risk evidence.Deployment gateA checkpoint used to decide whether a model is safe enough to release or expand into production.Deployment recordsinternal documents describing how systems are installed and set up.Deposit accountA savings product that typically follows fixed terms and eligibility conditions.Deposit guaranteeA legal protection framework that can reimburse eligible deposits if a covered institution fails.Deposit Guarantee SchemeA protection framework that covers eligible deposits up to a legal limit if a bank fails.Deposit limitthe maximum amount a customer can place into the product.Deputy CISOA senior security role that supports the CISO and may help manage security operations.DERA strict encoding format commonly used to store certificate data in binary form.DerateTo reduce a plant's output below its maximum level, often because of operational limits.DerivatiFinancial contracts whose value depends on an underlying event or asset.Derived SignalsNon-raw indicators such as classifier results, scores, or metadata that can help detect risk without keeping full conversation text.DescriptorA signed record that helps clients find and connect to an onion service.Descrizione del brevettoThe written patent description that explains the invention and its key features.DesensitizationA drop in receiver sensitivity caused by strong unwanted signals or excessive input power.Deserialization gadget chainA sequence of reachable methods or hooks that turns object reconstruction into execution.DesiccantA moisture-absorbing material used to reduce humidity in a container or space.Design clarityHow easily players can understand what a game expects them to do.Design documentsEngineering records that describe how a device was planned and built.Design envelopeThe operating range in which a system is intended to function safely and predictably.Design gapA mismatch between what a model predicts and what the real decision needs in order to be useful.Design principlea rule or goal that shapes how a system is built from the start.Design tradeoffA compromise where improving one feature can affect another.Design-time controlsSecurity checks applied during planning and development, before deployment.Designation regimeA legal mechanism that identifies specific entities for special obligations or restrictions.Designed dissentA workflow pattern that deliberately preserves disagreement so errors are easier to spot.DeskillingA reduction in the level of skill needed for a job because tools or processes take over key tasks.Desktop automationSoftware-driven control of a computer’s interface, including apps, windows, and forms.Desktop baselinethe expected standard look and behavior of a managed workstation.Desktop captureA feature that can expose screen or window content for recording or sharing.Desktop clientA local application installed on a computer to access a service or server.Desktop computerA personal computer designed to sit on a desk and be used by one person or a small group.Desktop estateThe collection of managed user workstations and installed applications.Desktop hypervisorSoftware that runs virtual machines on a personal computer or workstation.Desktop metaphorA design approach that presents files and applications as familiar physical objects.Desktop objectA Windows UI context that can isolate windows, input, and interaction from other desktops.Desktop settingsUser-facing configuration such as wallpaper, layout, and personalization choices.Desktop setupa personal computer configuration built for local, hands-on use.Desktop shellthe user interface layer that loads after sign-in.Desktop-as-a-Service (DaaS)centrally managed desktop access delivered from a shared platform.desktop.iniA legitimate Windows shell file used for folder customization that can also be misused for covert storage.Despatcha payment or credit linked to faster-than-planned cargo handling.DestabilizationActions meant to weaken confidence, coordination, or resilience in a target society or institution.Destination escapeA flaw class where a file operation lands outside the intended target path.Destination ValidationSecurity checks that confirm a request is going only to approved targets.Destination-escapeA flaw where extracted files land outside the intended target directory.Destructive controlClaimed ability to delete, alter, or disrupt stored data instead of only copying it.Desynchronizationa mismatch between what a client shows and what a server records.Detached processA child process started by software that runs independently from its parent.DetectThe first step in a credential defense workflow, focused on identifying exposed or risky secrets.Detection and mitigationDefensive measures used to spot hostile activity and reduce the chance of successful compromise.Detection coveragethe degree to which security controls can observe and alert on specific malicious techniques.Detection evasionTechniques that help malicious activity blend into normal operations and avoid security alerts.Detection gapthe time between a compromise and its discovery by defenders.Detection querya search rule or analytic expression used to find suspicious activity in security telemetry.Detection signalEvidence that helps defenders identify suspicious activity with higher confidence.Detection-as-codeManaging detection logic like software, with version control, review, and repeatable deployment.Detection-firstA security posture that prioritizes finding suspicious activity before taking containment action.Detection-to-response timeThe interval between spotting a threat and taking action against it.DeterministicA system behavior that is predictable because the same inputs produce the same actions.Deterministic behaviorA predictable response that stays the same under the same conditions.Deterministic control behaviorPredictable system response timing that industrial processes often require to remain safe and stable.Deterministic decisionA choice with a predictable outcome based on fixed rules or inputs.Deterministic logicRules that should produce the same result every time when the inputs do not change.Deterministic operationsSystem behavior that must stay predictable and timed correctly, which is vital in OT.Deterministic SoftwareCode that produces the same result for the same input, without model-style variability.Deterministic threat detectionA detection model that fires on a defined condition or state change rather than on statistical inference.Deterministic validationa repeatable test process designed to produce consistent results when checking a security finding.DetokenizationThe process of restoring the original value from a token when authorized.DetonationRunning suspicious content in a controlled environment to observe its behavior safely.Dev serverA development-only web server used for testing and live reload, often less hardened than production services.Dev TunnelsLegitimate developer tunneling tools that relay traffic to local services through a remote endpoint.DeveloperThe studio responsible for building the game itself.Developer accountThe publishing identity used to upload and manage extensions in a store.Developer credentialsSecrets such as passwords, tokens, or publishing keys used to access accounts and release software.Developer roleA GitLab permission level that supports project work such as code changes and pipeline interaction.Developer servera system used for software work that may hold sensitive assets if involved in an incident.Developer supply chainThe tools and systems that help build, test, and ship software.Developer targetingSocial engineering or intrusion tactics focused on engineers and build environments.Developer workflowThe sequence of tasks a developer uses to inspect, write, test, and integrate code.Developer workflow abuseExploiting normal coding tools and habits to deliver malicious code.Developer workflow integrationfitting security checks into the tools and steps engineers already use.Developer workstationA trusted endpoint used for coding or internal access that may connect to sensitive systems.Developer-layer encryptionEncryption implemented inside an application or database, closer to where sensitive data is processed.Developer-role permissionsAccess rights commonly used for contributing code and interacting with project workflows.Development server exposureA misconfiguration where a local-only tool becomes reachable from outside the trusted network.Developmental vulnerabilityThe greater sensitivity younger users may have to confusing or persuasive digital environments.Device attestationA method for verifying a device's identity or integrity using cryptographic proof.Device authenticity checkA verification step that helps confirm a hardware device is genuine and has not been tampered with.Device compromiseUnauthorized control or influence over a computer, phone, or workstation.Device concurrency limitThe maximum number of devices that can stay connected to one account at the same time.Device controlPolicy layer that limits which external devices can connect and what they can do.Device custodyThe chain of control over a company-issued device, including who received it, where it is used, and whether that matches policy.Device customizationchanging the look or form of a device for personal or practical reasons.Device enrollmentThe process of adding a device to management and policy enforcement.Device extractionThe process of copying data from a phone for analysis.Device fingerprintingA way to recognize a device using technical traits such as browser and system characteristics.Device fleetthe full set of endpoints an organization needs to manage, such as laptops, phones, and tablets.Device governancethe policies and controls used to manage how endpoints are enrolled and maintained.Device hygienekeeping laptops and phones updated, locked, and physically secure.Device isolationAn endpoint control that cuts a machine off from the network to help contain suspicious activity.Device limitThe maximum number of devices covered by a subscription plan.Device lockoutan event that prevents endpoints from being used normally.Device migrationthe process of moving apps, settings, and data to a new phone.Device policyRules that define what software and settings are allowed on a managed endpoint.Device policy controller (DPC)Enterprise software used to manage Android security settings and update timing.Device ProfileA bundle of client-side traits used to recognize a device or session, including software and hardware signals.Device provisioningThe process of issuing and preparing a work device for an approved user.Device reuseAssigning old hardware a new role instead of discarding it.Device salvageReusing working parts from damaged hardware to restore partial or full function.Device seizureTaking phones or computers for evidence and forensic review.Device spoofingAltering reported device identity so hardware appears to be a different model or brand.Device TrustA policy decision about whether an endpoint is allowed to access sensitive resources.Device tunnelA VPN connection that establishes before user sign-in, supporting device-level access.Device unlock factorA local check such as a fingerprint, Face ID, or PIN used to approve use of a passkey.Device whitelistingA control that allows only approved hardware or storage devices to connect to a system.Device wipea function that erases local data from a phone or laptop.Device-bound access controlA rule that limits which devices can open or display a specific chat or account feature.Device-Bound Session ControlA protection model that ties a session to a specific device to make theft less useful.Device-code attackAbuse of a legitimate device authorization flow to trick a user into authorizing access for an attacker-controlled session.Device-code loginAn authentication method that lets a user complete sign-in on one device by entering a code on another.Device-Count LicensingA subscription model that limits protection to a fixed number of devices.Device-linkingA cross-device sign-in or transfer process that moves authenticated access between devices.Device-targeting dataServicing data used to decide which systems receive an update or rollout first.DeviceIoControlA Windows API that sends IOCTL requests from user mode to a device driver.DeviceNetworkEventsA Defender XDR table that records device network activity.DevOps pipelineAn automated workflow that builds, tests, and deploys software.DEXAndroid bytecode format used by apps, often loaded at runtime by malware to change behavior after installation.Dexterityfine motor control that lets a machine handle tools and irregular objects with precision.DFARSDefense Federal Acquisition Regulation Supplement, the procurement rule set that carries cybersecurity requirements into contracts.DFIRDigital Forensics and Incident Response, the practice of investigating attacks and collecting digital evidence.DFMADesign for Manufacturing and Assembly, an approach that favors repeatable, factory-built components over custom site work.DFSDistributed File System, a Windows feature that routes clients to the correct file server target.DFS referralA message that directs a client to the correct target in a Windows Distributed File System namespace.DFS referral responseThe network message that tells a client where to go next in a DFS namespace.DGFiPFrance’s Directorate General of Public Finances, the public body responsible for tax administration and related records.DHCPv6The IPv6 version of the Dynamic Host Configuration Protocol, used to provide network configuration to clients.DiagnosisThe process of identifying which component or subsystem is causing a fault.Diagnostic cartridgea cartridge-shaped tool used to check how a console behaves under known conditions.Diagnostic endpointA web-accessible router function used for tests such as Ping or Traceroute.Diagnostic imagingmedical scanning workflows that rely on connected systems and time-sensitive clinical delivery.Diagnostic loggingRecording system events or faults for later analysis.Diagnostic signalan observable clue that can help explain how a device is behaving.Diagnostic toolsHardware or software used to inspect faults and verify system behavior.Dialoguestructured exchange that helps test arguments and refine judgment.DIBDefense Industrial Base, the network of companies supporting defense systems and services.DIBS loopbackThe software loopback path used by SMC-D, where software must enforce limits that hardware may otherwise provide.DICOM Structured ReportingA medical imaging format that links findings and measurements to the source images for later review.Dictation trafficAudio or speech input that an application processes as text or command content.DiffA comparison view that shows changes between two file or repository versions.Differential diagnosisA ranked list of possible conditions that could explain a patient’s symptoms.diffpatchA Gitea feature used to apply patches to repository content.DiffuserA layer that spreads light to create a softer, more even glow.DiffusersA Hugging Face library for building and running diffusion-based AI pipelines.Diffusion modelA generative method that creates outputs through iterative denoising steps.Digital access controlthe system used to separate features between different subscription levels.Digital adaptationThe process of reworking content so it can run on or fit a digital platform.Digital assemblyA corporate meeting conducted online, with participation and decisions managed through digital systems.Digital asset tracingtracking the movement of crypto funds across addresses and services.Digital backdoorAn undocumented access path that may allow unauthorized entry into a system or device.Digital bonda bond issued or managed through digital infrastructure, often with electronic recordkeeping and settlement.Digital busa shared communication pathway used by onboard systems to exchange data.Digital Chart IAPself-regulatory guidance for making advertising and sponsorship visible in digital content.Digital clinica care model that uses software to organize visits, intake, and follow-up.Digital contentOnline material such as articles, posts, pages, and documentation that can be indexed or cited.Digital datainformation stored or transmitted electronically that can be used in a legal proceeding.Digital DelegationThe assignment of authority to software to act on a person's or organization's behalf.Digital dependencyReliance on external systems or services that can influence an organization’s security and continuity.Digital developmentThe expansion of digital services, infrastructure, and access in a way that supports growth.Digital distractioninterruptions from devices or online environments that reduce concentration.Digital documentA document created, stored, or managed in electronic form.Digital enrollmentAn online process used to subscribe to a service or contract.Digital Europe ProgrammeThe EU funding program used to deploy digital technologies and infrastructure at scale.Digital evidence preservationthe process of keeping records intact before they expire or are deleted.Digital executive protectionA defensive approach focused on reducing the exposed personal data of high-value individuals.Digital filmA concept that reimagines a film-like imaging layer in digital form.Digital guidanceOnline tools or interfaces that help users make informed decisions or find services.Digital HEDISNCQA’s broader modernization effort toward more computable, machine-readable quality measures.Digital identity walletA secure app or system designed to hold and selectively share verified identity attributes.Digital inclusionthe ability of people and regions to access and use digital tools effectively.Digital innovationthe use of new technologies and workflows to improve how services are delivered.Digital laborThe use of AI or automation to perform tasks that would otherwise be done by people.Digital licenseA platform-issued entitlement that grants access to software without relying on a physical copy.Digital logicThe binary circuits and operations that form the basis of digital hardware design.Digital longevityThe ability of hardware or software to remain useful over time.Digital loyaltyA customer reward system that uses accounts, apps, or identifiers instead of paper-based stamps.Digital manufacturingProduction methods that rely on software-defined design and machine control.Digital maturityAn organization’s ability to adopt and sustain technology in a controlled, reliable way.Digital monocultureHeavy reliance on one or a few technology ecosystems, which can increase systemic exposure.Digital multiplexA term used in the article for the digital replacement of analog broadcast TV channels.Digital narrationThe way stories, ideas, and information are produced and shared online.Digital operational resilienceThe ability to keep critical services running and recover quickly after cyber or technology disruption.Digital pathologyThe use of scanned slides and software tools to review, store, and analyze tissue samples.Digital perka non-cash benefit delivered and managed through an app or platform.Digital personaA compartmented online identity used for a specific purpose or trust domain.Digital photographyImage capture using electronic sensors and digital files.Digital platformsonline systems that shape how information is distributed, amplified, and consumed.Digital productA software or connected product that may be subject to cybersecurity requirements.Digital repatriationThe practice of moving data or workloads from external cloud environments back under direct organizational control.Digital reputationThe public trust a company builds through search results, reviews, and user feedback.Digital responsibilityThe duty to design and operate online spaces with safety and accountability in mind.Digital rightsLegal and civic protections that apply to data, online services, and automated decision-making.Digital servicean online function delivered to users, such as a portal, workflow, or citizen interface.Digital Services Act (DSA)An EU law that sets duties for online platforms and adds governance tools for exceptional situations.Digital signageNetworked or managed screens used for public messaging, advertising, or information.Digital signature schemeA cryptographic system used to verify authenticity and integrity of data or software.Digital signing certificatea certificate used to verify documents or code; the private key must be protected.Digital sustainabilityThe capacity to maintain digital services over time without degrading quality, support, or value.Digital Therapeutics (DTx)software-based interventions intended to deliver therapeutic benefit, with regulatory status depending on jurisdiction and intended use.Digital toolssoftware and platforms that help people collect, manage, and coordinate information.Digital Transformation (DX)A business-wide shift that uses digital technology to change operations, services, and organizational behavior.Digital Trust LayerThe account, identity, and authorization controls that keep a service and its rewards reliable.Digital upgradeA modification that adds modern electronic capture or workflow capabilities to older equipment.Digital violenceHarm carried out through digital systems, including image-based abuse and coercive sharing.Digital watchA watch that displays time electronically rather than with analog hands.Digital-asset threatA security risk focused on cryptocurrency, wallets, tokens, or related transaction systems.Digital-to-physical workflowA process that turns software instructions into real-world output.Digitally signed installerA software package signed by the publisher so its integrity and origin can be checked.Dimensional accuracyhow closely a copy matches the intended size and shape.Dimensional toleranceThe allowed difference between a printed part's actual size and its intended size.DiplomaticsThe historical discipline that studies how documents establish credibility.Direct answer interfaceA search experience that presents synthesized responses inside the product instead of only listing links.Direct costsExpenses that can be tied immediately to the AI system, such as development or infrastructure.Direct I/OA file access mode that moves data with less page-cache mediation, relying heavily on filesystem correctness.Direct Internet ExposureA condition where a device is reachable from the public internet without a protective access layer.Direct SendAn unauthenticated mail method in Microsoft 365 and Exchange Online, often kept for legacy devices or apps.Direct solar useUsing sunlight for a task without first converting it into electricity.Direct-to-chip coolingA liquid cooling method that removes heat directly from CPUs and GPUs using cold plates.Direct-to-consumer revenuesales made straight to customers, often through digital checkout and support systems.Direct-to-device (D2D)A satellite connectivity model that links ordinary smartphones to space-based networks without special terminals.Direct-to-IP connectionA network connection that targets a raw IP address instead of a domain name.Director of National Intelligence (DNI)The official who coordinates the U.S. intelligence community and helps align priorities across agencies.Directory enumerationbrowsing exposed folders or paths to discover what a server contains.Directory Replication Service Remote ProtocolThe RPC protocol used by domain controllers to exchange Active Directory data.Directory servicea system that stores identity and account information for users.Directory.Read.AllA broad Microsoft Graph permission that can allow read access to directory resources such as users, groups, and apps.Diritto d’autorecopyright law protecting creative works and their authorized use.Dirty shutdownAn unclean database stop caused by power loss or interruption.Disabled by defaulta setting that starts in the off position until the user changes it.Disaggregated servingAn infrastructure approach that separates model stages, such as prefill and decoding, across different resources for scale.DisallineamentiMismatches between records, systems, or payment details that can disrupt processing.Disaster roamingThe ability for a device to use another carrier’s network during emergencies.Disclosure bottleneckA slowdown that happens when report handling capacity cannot keep up with incoming vulnerability findings.Disclosure controlRules and processes that govern when sensitive information can be released publicly.Disclosure dayThe date a vulnerability becomes publicly known through a CVE or coordinated announcement.Disclosure delaythe gap between an incident and public notification, which can slow response.Disclosure pipelineA process that transfers exploit findings to vendors so they can investigate and fix the weakness.Disclosure postureThe amount and type of security or operational information a company makes public.Disclosure readinessthe ability to verify facts, assess exposure, and respond before rumors spread.Disclosure riskThe chance that sensitive information may be exposed or reused.Disclosure threatextortion pressure based on publishing stolen or claimed stolen material.Disclosure thresholdThe point at which an incident may require formal reporting because its effects are considered significant.Disclosure timera timer-like disclosure mechanism meant to increase urgency before more information is released.Disconnected environmentA setup that can operate independently without public-cloud connectivity.Disconnected registryAn internal registry used when a cluster cannot reach upstream services directly.Discontinuationthe decision to stop selling or actively developing a product line.DiscordA centralized chat platform used for servers, channels, and invite-based communities.Discord tokena session credential that can let an attacker impersonate an account.Discount effectthe short-term lift in interest created by a promotional price.Discovery fileslegal case materials collected for proceedings and often highly sensitive.Discovery responseA network reply used by devices and apps to find each other on a local network.Discrete componentAn individual electronic part used in a circuit, such as a resistor or transistor.Disguised listeningBehavior that tries to make automated or suspicious plays appear like normal user activity.Disinformation campaignA coordinated effort to spread false or misleading information to influence beliefs or behavior.Disk encryptionA control that helps protect stored data if a device is lost or stolen.Disk-image attachmentA file container that can hold additional files and may appear less suspicious than a standard document.DiskANNMicrosoft’s vector indexing approach for fast approximate nearest-neighbor search in SQL-based AI retrieval.Dispatch databaseA system used to manage routing, scheduling, and shipment activity.Dispatch systemsoperational platforms used to route emergency calls and coordinate response services.Dispatcher serviceA privileged background component that brokers sensitive system actions.DispatchingThe process of deciding how and when electricity generation and storage are used.Displacementa change in position from one point to another.Displacement signalEvidence that an AI system removed a human step from a workflow or handed off less manual work.Display boardA circuit board built to show information on a screen or panel.Display calibrationSettings that help a screen render color and brightness as expected.Display moduleA self-contained screen component that can be integrated into custom hardware.Display workflowThe chain of steps used to prepare and send content to a screen.Disposable emaila temporary address meant for short-term use.Disposable infrastructureWeb resources that can be replaced quickly when a campaign wants to change surface details.DisposalThe process of discarding or routing waste into an accepted handling stream.DisruptionA defensive action that reduces an attacker’s ability to communicate or operate.Distance controlWorkplace monitoring that can observe activity without being physically present.Distinctive characterThe ability of a sign to identify one business and separate it from competitors.Distinguished Name (DN)The unique LDAP identifier for a directory entry, including administrative accounts.Distressed assetsbusinesses or property under financial stress that may need careful control changes.Distributed access layerA network of local entry points that provides access to central services without moving the core authority.Distributed adversaryan attacker model spread across systems or locations to make disruption harder.Distributed antenna system (DAS)A venue coverage system that helps extend cellular signal inside large or crowded buildings.Distributed C2A setup that spreads control traffic across multiple servers to reduce visibility.Distributed denial-of-serviceAn attack that overwhelms a target with traffic to make it unavailable.Distributed energy resources (DER)Small or medium energy assets, such as solar plants and storage systems, that interact with the grid.Distributed Energy Resources (DERs)Small-scale energy assets, such as solar arrays or batteries, connected closer to the point of use.Distributed inferenceRunning one AI model across multiple devices so they share the workload instead of using a single machine.Distributed infrastructureA setup where services and computing resources are spread across multiple locations.Distributed SQLA database architecture that spreads data and transactions across multiple nodes while preserving consistency and resilience.Distributed TracingA way to follow one request as it moves through multiple services and dependencies.Distributed worka work model where teams operate from multiple locations instead of one central office.Distributed workforceUsers working across offices, homes, and mobile environments that need consistent policy enforcement.Distribution activityThe criminal process of spreading malware or related payloads through intermediary channels.Distribution EdgeThe operational boundary where distribution assets and connected field systems meet broader utility networks.Distribution eventA scheduled release where content is delivered to viewers through one or more platforms.Distribution filethe packaged release artifact that installation tools download from a registry.Distribution modelthe way software is delivered and monetized through a platform or marketplace.Distribution trust boundarythe point where users depend on a platform to verify software legitimacy.District HeatingA centralized network that distributes heat to multiple buildings through insulated pipes.DIYShort for do it yourself, referring to projects built by individuals rather than mass-market vendors.DIY biofuelA home-built approach to producing fuel rather than buying a finished product.DIY deviceA self-built gadget assembled outside a commercial product line.DLCdownloadable content added after the original release.DLL loadingA process where one program loads a library file, which malware can abuse for stealth or execution.dlopen()A Unix/Linux function that loads shared libraries at runtime, often used for plugins and modules.DLTdistributed ledger technology, a system for maintaining records across multiple nodes instead of one central database.DLT Pilot Regimea regulatory framework for testing market infrastructure based on distributed ledger technology.DMDCDefense Manpower Data Center, a Department of Defense system tied to personnel and eligibility records.DNA editingdirect change to genetic material at its source.DNE driverA Citrix network driver whose presence or absence can change exposure in some client deployments.DNS (Domain Name System)The naming system that turns domain names into IP addresses for network connections.DNS A-recordA DNS record that maps a domain to an IPv4 address; here, responses are used as a control signal.DNS C2Command-and-control traffic carried through DNS requests and responses instead of more obvious web channels.DNS collisionA naming problem where a placeholder or fictional name matches a real address or domain and triggers live network behavior.DNS controlsPolicies that govern name resolution, often used to block or steer requests away from risky destinations.DNS exfiltrationData theft that hides information inside DNS queries or subdomains.DNS loggingThe retention of DNS query data for detection, investigation, and hunting.DNS lookupThe process of resolving a domain name into an IP address before a connection is made.DNS resolverthe service that translates a domain name into an IP address.DNS spoofingSending forged DNS answers so a host reaches the wrong destination.DNS trafficNetwork lookups used to resolve domain names, which can also carry hidden command-and-control data.DNS tunnelingA covert channel that hides commands or data inside DNS traffic.DNS-based blockingA filter that can stop requests to known ad, tracker, or malware domains.DNS-over-HTTPS (DoH)A transport that carries DNS traffic over HTTPS.DNSKEYA DNS record type used by DNSSEC to publish public keys for signature verification.Do-it-yourself buildA custom project assembled outside a commercial product line.DockerA container platform used to package and run applications in isolated environments.docker cpA Docker command that copies files between a container and the host filesystem.Docker EngineThe core software that runs and manages containers on a host.Docker escapeA breakout path where code inside a container reaches the host or other workloads.Docker imageA packaged container artifact used to run software consistently across systems.Docker registryA service that stores and distributes container images through repositories, manifests, and blobs.Docker socketA control interface for Docker that can become dangerous if exposed on a host.DOCTYPEAn HTML declaration that tells a parser which document type rules to apply.Document accessA legal right to view or obtain copies of administrative records already held by a public body.Document automationTechnology that classifies, routes, and processes documents with minimal manual handling.Document DatabaseA database that stores information as structured documents rather than rows and columns.Document exposureUnauthorized disclosure of internal files that can increase operational and reputational risk.Document InspectorA Microsoft Office tool used to find and remove hidden data and other non-obvious document content.Document navigationthe tools that help users move through a file quickly.Document portalA web system used to exchange files and sensitive records.Document provenanceThe history and trustworthiness of a file, including where it came from and what it may contain.Document repositorya storage area for contracts, IDs, or internal records that can attract attackers.Document segregationseparating sensitive files through access controls and need-to-know limits.Document triageThe process of sorting and reviewing uploaded files to identify useful or sensitive information.Document-management systemSoftware used to store, organize, and route electronic records.Document-serving endpointA web path that delivers stored files, images, or documents to users.DocumentarloThe act of recording the steps, decisions, and evidence that explain how an invention was formed.Documentary proofRecords that help demonstrate how a system was controlled and supervised.Documentation build processThe workflow that generates package documentation and may touch untrusted package content.Documentation driftThe gap that grows when system records no longer match how technology is actually used.Documentation WorkerAn automated process that generates or handles package documentation and may process package-controlled content.DocumentDB snapshotA backup image of an Amazon DocumentDB cluster used for restore or migration tasks.Documento commercialeTransaction document that should be issued at the time of sale.Documento informaticoAn electronic record that can carry legal and operational significance.DOM sanitizationThe process of removing dangerous HTML or attributes before content is inserted into a page.DOM sinkA browser-side code path where unsafe input can become executable content.DOM.sanitize()The MapLibre sanitization helper implicated in the vulnerability.dom0The privileged control domain in Xen that manages guests and handles key host-side functions.Domain admina highly privileged account that can control many settings across a Windows domain.Domain admin-equivalent privilegesaccess level that can alter core identity, policy, and administration controls.Domain and account-related reliefLegal or technical actions aimed at limiting access to domains or accounts associated with abuse.Domain blockingA measure that prevents users from reaching a domain through network or registry controls.Domain churnRapid creation or rotation of domains that can complicate tracking and filtering.Domain collisionA naming overlap where a test or fictional domain matches a real registered domain.Domain compromiseA condition in which an attacker reaches a level of control that can affect a whole enterprise identity domain.Domain controlA high-privilege state where an attacker can influence authentication and administration across a Windows domain.Domain ExpertA person who understands the edge cases, policy details, and process context behind a business function.Domain groundingTying AI outputs to authoritative references so answers stay closer to verified facts.Domain hijackUnauthorized takeover or redirection of domain control.Domain impersonationThe use of a domain name that closely mimics a trusted brand or product to mislead users.Domain joinThe state in which a Windows device is enrolled in a directory domain and uses it for enterprise authentication.Domain parkingA function that points an extra domain name to an existing site as an alias.Domain scopeThe host range over which a cookie may be sent, which can broaden its reach across related subdomains.Domain validationThe process certificate issuers use to confirm control over a domain.Domain-admin-equivalent rightsPrivileged access level that can let an intruder manage core domain functions.Domain-joined workstationA computer managed by an enterprise domain, often subject to centralized policy and monitoring.Domain-level accessbroad administrative control over an environment or account domain.Domain-level compromiseA compromise affecting an organization’s central identity or directory layer, which can expand attacker reach.Domestic sourcingBuying inputs from U.S. sources, often to meet policy or procurement requirements.Donor metadataidentifying details attached to a contribution, such as an email address or payment record.DOOMA classic first-person shooter often used as a benchmark for unusual technical projects.DoomscrollingRepeatedly consuming negative content in a hard-to-stop loop.Doorway pageA page built to rank for search queries and send visitors elsewhere, often used in spam and fraud campaigns.Doppler effectA change in observed frequency caused by motion between source and listener.DorkingSearch-engine querying with special operators to uncover specific publicly reachable content.Dormant Emergency Bank (DEB)a standby concept intended for emergency use.Dormant ruleA policy entry that exists but rarely or never matches traffic.DoS amplificationA pattern where a small request stream creates a much larger downstream burden.Dossier sanitarioa structured health record used to support patient care and clinical continuity.Dot matrix-like effectAn image built from visible individual points rather than continuous ink.Dottoratoadvanced research training that can create long-term value when institutions use it well.Double freeA memory corruption bug where the same memory is released twice, sometimes creating a path to exploitation.DowngradeA fallback to a weaker protocol or network mode that can increase exposure to interception.Download codeA one-time token used to unlock digital software or media.Download lineageThe chain of events showing where a file came from, which processes touched it, and how it reached the endpoint.Downstream AuthorizationSecurity checks enforced by the system that receives an action, not by the AI model itself.Downstream clusterA Kubernetes cluster managed through a higher-level platform such as Rancher.Downstream compromisesuspected impact on connected systems or partners that still requires verification.Downstream dependencyA product or tool that uses a third-party component and may inherit its vulnerabilities until it updates.Downstream effectsSecondary disruptions that may follow if core services, credentials, or linked systems are impacted.Downstream enrichmentAdditional analysis added to a vulnerability record after initial publication, often for defender use.Downstream environmentSystems that depend on an upstream provider, product, or service.Downstream environmentsconnected systems that may be affected after an incident.Downstream fraudmisuse of stolen data for impersonation, phishing, or financial abuse.Downstream integrityThe trust that later systems place in software artifacts produced earlier in the delivery chain.Downstream modelA later AI component in a pipeline that processes content after an earlier screening step.Downstream riskpossible harm that can extend to connected customers or services.Downstream serviceA connected system that may be affected when a core service is disrupted.Downstream systemA connected service or tool that may be affected after an upstream security event.Downtime proceduresPreplanned manual processes used when digital systems are unavailable.DPIDossier patient informatisé, the centralized electronic system used to manage patient records in French healthcare.DragThe resistance an object experiences as it moves through air or another fluid.DRAM controllerThe hardware logic that manages memory access and helps translate addresses before they reach system RAM.DRCDesign Rule Check, a validation step that flags layout violations before fabrication.Drift monitoringTracking whether model behavior changes over time in ways that affect quality or reliability.Driver abuseMisuse of a legitimate driver, often to weaken defenses or gain privileged access.Driver componentA software module that runs with elevated trust and can interact closely with the operating system.Driver installationThe process of adding a device driver so Windows can communicate with hardware.Driver installation workflowThe sequence Windows uses to validate, load, and configure device drivers.Driver regressionA change in driver behavior that introduces new bugs or performance loss.Driver-assistance systemSoftware that supports driving tasks but still requires human attention and intervention.DRMDigital Rights Management, controls that limit how digital content can be copied, launched, or shared.Dronean unmanned aircraft controlled remotely or with limited onboard automation.Drone attackThe use of unmanned aircraft for surveillance, disruption, or hostile action.Drone wallA policy term for layered counter-drone defenses built from sensors, tracking, and neutralization capabilities.Drop-inA WordPress file that loads early and can alter core behavior before normal plugins run.Dropper appA delivery app designed to install or launch a separate malicious payload.Drosophila melanogasterThe common fruit fly used widely in biological research.Drug discoverythe process of finding and developing new medicines.Drug Master Filetechnical dossier that supports the quality and manufacturing profile of a medicine.DRY"Don't Repeat Yourself" - a rule that discourages duplicated logic so changes stay consistent.Dry coolingA water-light method that uses air instead of water to remove waste heat.DRY principle"Don't Repeat Yourself", a design rule that reduces duplicated knowledge in code and security logic.DS-Replication-Get-Changes-AllAn extended right that can allow replication of secret domain data if granted too broadly.DSLRDigital single-lens reflex camera, a camera type with internal optical and electronic parts that can fail in different ways.DSM DirectiveAn EU copyright directive that includes text-and-data-mining rules and rights reservation mechanisms.DSNData Source Name, a connection profile that stores server details and login settings for database access.DSPMData Security Posture Management, a method for finding and assessing sensitive data risk.DTDDocument Type Definition, an XML feature that can define entities and becomes risky when external entity resolution is allowed.Dual Approvalrequiring two independent sign-offs before sensitive actions proceed.Dual AuthorizationA control that requires two separate approvals before sensitive financial actions can be completed.Dual digital signaturea transaction control that requires two authorized approvals.Dual-fuelA commercial bundle that combines electricity and gas under one plan.Dual-hop architectureA design that splits traffic across two relays so one service does not know both source and destination.Dual-pane interfaceA layout that shows two locations at once to simplify moving files.Dual-stack networkinga setup where IPv4 and IPv6 operate side by side on the same host or network.Dual-use capabilitiesFeatures that can support both legitimate defense work and harmful abuse.Dual-use infrastructureCivilian assets such as ports, rail lines, and bridges that also support defense operations.Dual-use platformA system that supports legitimate activity but can also be repurposed for abuse.Dual-use systemA tool that can support both legitimate work and potentially harmful misuse.Duplicative reportingMultiple notifications that ask for similar information under different rules or deadlines.DurabilityThe ability of a material or part to withstand wear, stress, and environmental exposure over time.Durable ObjectsCloudflare’s stateful coordination primitive for building applications that need shared, persistent state.Durable policya long-term approach that keeps working after emergency or extraordinary funding ends.Duress passworda credential intended to signal coercion or trigger a special response during authentication.DUV lithographyA mature semiconductor manufacturing process that uses deep ultraviolet light for chip patterning.DVIA digital video interface used to send display signals to monitors.Dwelling timeThe period an attacker remains inside a network before detection.DWGa file format commonly used for technical and design drawings.DX PromotersEmployees who help spread digital practices and support adoption across teams and departments.Dynamic Address ReconfigurationAn SCTP feature that can add, remove, or change addresses during an association.Dynamic API ResolutionA technique where malware looks up system functions at runtime instead of embedding them plainly.Dynamic Class LoadingA runtime code-loading method that can become risky when inputs are not tightly controlled.Dynamic contentMedia or features that can change after release through updates or remote delivery.Dynamic forwardingAn SSH mode that can direct traffic to different destinations within one session.Dynamic Method Invocation (DMI)A Struts feature that allows requests to choose which method gets invoked, increasing attack surface.Dynamic model routingAutomatic selection of an AI model for each request based on policy signals such as cost, latency, and performance.Dynamic policiesRules that can adapt to context, role, or risk instead of staying fixed for every situation.Dynamic rangeThe span between the weakest and strongest signals a system can handle reliably.Dynamic segmentationThe practice of dividing networks or assets into smaller trust zones to limit lateral movement and reduce blast radius.