diff --git a/README.md b/README.md index 6d0a25e..ca54b6e 100644 --- a/README.md +++ b/README.md @@ -3,12 +3,14 @@ MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity This project aims to document SentinelOne Deep Visibility queries for detecting Windows TTPs generated by Red Canary Co's Atomic Red Team framework. These queries have been crafted and tested on Liberty console release and should support Deep Visibility 3.0. Recommending that your Sentinel Agents be on 4.2.x or newer, as some of the indicators data being queried is only collected by newer agents. -## Tactics +## Tactics (IN PROGRESS) [Privilege Escalation](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/PrivilegeEscalation.md) [Defense Evasion](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/DefenseEvasion.md) + +## Tactics (PENDING) [Persistence]() [Impact]()