mirror of
https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries
synced 2026-06-08 17:17:21 +00:00
Create README.md
This commit is contained in:
@@ -0,0 +1,28 @@
|
||||
# SentinelOne-ATTACK-Queries
|
||||
MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity
|
||||
|
||||
This project aims to document (mostly Windows) SentinelOne queries for detecting TTPs generated by Red Canary Co's Atomic Red Team framework.
|
||||
|
||||
[Privilege Escalation](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/PrivilegeEscalation.md)
|
||||
|
||||
[Defense Evasion](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/DefenseEvasion.md)
|
||||
|
||||
[Persistence]()
|
||||
|
||||
[Impact]()
|
||||
|
||||
[Discovery]()
|
||||
|
||||
[Command and Control]()
|
||||
|
||||
[Collection]()
|
||||
|
||||
[Execution]()
|
||||
|
||||
[Exfiltration]()
|
||||
|
||||
[Credential Access]()
|
||||
|
||||
[Lateral Movement]()
|
||||
|
||||
[Initial Access]()
|
||||
Reference in New Issue
Block a user