1
0
Форкнуть 0
Microsoft-365-Defender-Hunt.../00-query-submission-templat...

43 строки
952 B
Markdown
Исходник Обычный вид История

2020-04-22 15:42:24 +03:00
# < Insert query name >
< Provide query description and usage tips >
## Query
```
< Insert query string here >
```
## Category
2020-07-07 00:03:40 +03:00
This query can be used to detect the following attack techniques and tactics ([see MITRE ATT&CK framework](https://attack.mitre.org/)) or security configuration states.
2020-04-22 15:42:24 +03:00
| Technique, tactic, or state | Covered? (v=yes) | Notes |
|------------------------|----------|-------|
| Initial access | | |
| Execution | | |
| Persistence | | |
| Privilege escalation | | |
| Defense evasion | | |
| Credential Access | | |
| Discovery | | |
| Lateral movement | | |
| Collection | | |
| Command and control | | |
| Exfiltration | | |
| Impact | | |
| Vulnerability | | |
| Misconfiguration | | |
| Malware, component | | |
## Contributor info
**Contributor:** < your name >
**GitHub alias:** < your github alias >
**Organization:** < your org >
**Contact info:** < email or website >