From 113a4dd908ccce96f40a447718ec14c86c4b28b1 Mon Sep 17 00:00:00 2001 From: keyboardcrunch <40863898+keyboardcrunch@users.noreply.github.com> Date: Tue, 15 Sep 2020 22:44:12 -0500 Subject: [PATCH] Update README.md --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 6d0a25e..ca54b6e 100644 --- a/README.md +++ b/README.md @@ -3,12 +3,14 @@ MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity This project aims to document SentinelOne Deep Visibility queries for detecting Windows TTPs generated by Red Canary Co's Atomic Red Team framework. These queries have been crafted and tested on Liberty console release and should support Deep Visibility 3.0. Recommending that your Sentinel Agents be on 4.2.x or newer, as some of the indicators data being queried is only collected by newer agents. -## Tactics +## Tactics (IN PROGRESS) [Privilege Escalation](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/PrivilegeEscalation.md) [Defense Evasion](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/DefenseEvasion.md) + +## Tactics (PENDING) [Persistence]() [Impact]()