Skip to content

Sensor Mappings To ATT&CK v1.0.0

Contents

Overview
Definitions
Mapping Methodology
Sensor Mapping
- Auditd
- CloudTrail
- OSQuery
- Sysmon
- WinEvtx
- ZEEK
Use Cases
Example Scenarios
Changelog

Docs
Changelog

Changelog¶

Sensor Mappings to ATT&CK 1.0¶

1.0.0 – December 14, 2023

The initial release of Sensor Mappings to ATT&CK includes the model, methodology, mappings, and worked examples.

← Network Example Scenario

On This Page

Changelog
- Sensor Mappings to ATT&CK 1.0

The Center for Threat-Informed Defense

The Center for Threat-Informed Defense is a non-profit, privately funded research and development organization. Our mission is to advance the state of the art and the state of the practice in threat-informed defense globally.

Related Sites

Measure Maximize And Mature Threat-Informed Defense (M3TID) Summiting The Pyramid Attack Flow

© 2023 MITRE. Approved for public release. Document number(s) CT0089.