Data Components identify the specific properties/values relevant to detecting a given ATT&CK technique or sub-technique.

Linked Issues

Issuelinks
Linktyp Issue
is related to Windows Registry Key Deletion
is related to Network Connection Creation
is related to File Access
is related to File Creation
is related to Network Traffic Content
is related to Logon Session Metadata
is related to Process Creation
is related to Drive Creation
is related to Process/Event Alarm
is related to Drive Modification
is related to Service Creation
is related to Process Termination
is related to File Metadata
is related to Service Modification
is related to Command Execution
is related to Service Metadata
is related to Scheduled Job Metadata
is related to File Modification
is related to Software
is related to Process History/Live Data
is related to OS API Execution
is related to Application Log Content
is related to Logon Session Creation
is related to Device Alarm
is related to Script Execution
is related to Network Traffic Flow
is related to User Account Authentication
is related to Asset Inventory
is related to Firmware Modification
is related to Module Load
is related to Windows Registry Key Modification
is related to File Deletion
is related to Process Metadata
is related to Scheduled Job Creation
is related to Network Share Access
is related to Scheduled Job Modification
is related to Active Directory Credential Request
is related to WMI Creation
is related to Group Modification
is related to Image Modification
is related to Pod Enumeration
is related to Response Content
is related to Volume Metadata
is related to Response Metadata
is related to Instance Stop
is related to Malware Content
is related to Snapshot Deletion
is related to Process Access
is related to Active Directory Object Creation
is related to Certificate Registration
is related to Kernel Module Load
is related to Instance Enumeration
is related to Active DNS
is related to Driver Load
is related to Volume Deletion
is related to Snapshot Creation
is related to Cloud Storage Modification
is related to Instance Modification
is related to Instance Metadata
is related to Cloud Storage Deletion
is related to Pod Creation
is related to Cloud Storage Access
is related to Cloud Storage Creation
is related to Active Directory Object Modification
is related to Active Directory Object Access
is related to Web Credential Creation
is related to Container Start
is related to Pod Modification
is related to Drive Access
is related to Firewall Metadata
is related to Instance Deletion
is related to Windows Registry Key Creation
is related to Host Status
is related to Image Deletion
is related to Snapshot Metadata
is related to Cloud Service Enumeration
is related to Group Metadata
is related to Group Enumeration
is related to Social Media
is related to Active Directory Object Deletion
is related to Container Enumeration
is related to Malware Metadata
is related to Container Creation
is related to Image Creation
is related to Cloud Service Metadata
is related to Image Metadata
is related to Instance Creation
is related to User Account Metadata
is related to Named Pipe Metadata
is related to Firewall Enumeration
is related to Pod Metadata
is related to Firewall Disable
is related to Passive DNS
is related to User Account Modification
is related to Firewall Rule Modification
is related to Volume Modification
is related to Process Modification
is related to User Account Deletion
is related to Volume Creation
is related to User Account Creation
is related to Container Metadata
is related to Cloud Storage Metadata
is related to Cloud Service Modification
is related to Cloud Service Disable
is related to Volume Enumeration
is related to Windows Registry Key Access
is related to Snapshot Modification
is related to Driver Metadata
is related to Instance Start
is related to Cluster Metadata
is related to Cloud Storage Enumeration
is related to Web Credential Usage
is related to Domain Registration
is related to Snapshot Enumeration
Impressum Deutsch Englisch