From a11206d450ff717c24ee0edf4780a453d3a9b4fa Mon Sep 17 00:00:00 2001 From: keyboardcrunch <40863898+keyboardcrunch@users.noreply.github.com> Date: Tue, 15 Sep 2020 22:35:58 -0500 Subject: [PATCH] Create README.md --- README.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..64f23c3 --- /dev/null +++ b/README.md @@ -0,0 +1,28 @@ +# SentinelOne-ATTACK-Queries +MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity + +This project aims to document (mostly Windows) SentinelOne queries for detecting TTPs generated by Red Canary Co's Atomic Red Team framework. + +[Privilege Escalation](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/PrivilegeEscalation.md) + +[Defense Evasion](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/DefenseEvasion.md) + +[Persistence]() + +[Impact]() + +[Discovery]() + +[Command and Control]() + +[Collection]() + +[Execution]() + +[Exfiltration]() + +[Credential Access]() + +[Lateral Movement]() + +[Initial Access]()