From a758a042c5e5691aa3d834fb969454bf990f6757 Mon Sep 17 00:00:00 2001 From: keyboardcrunch <40863898+keyboardcrunch@users.noreply.github.com> Date: Wed, 16 Sep 2020 18:04:11 -0500 Subject: [PATCH] Update README.md --- README.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index ca54b6e..fed988f 100644 --- a/README.md +++ b/README.md @@ -3,10 +3,15 @@ MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity This project aims to document SentinelOne Deep Visibility queries for detecting Windows TTPs generated by Red Canary Co's Atomic Red Team framework. These queries have been crafted and tested on Liberty console release and should support Deep Visibility 3.0. Recommending that your Sentinel Agents be on 4.2.x or newer, as some of the indicators data being queried is only collected by newer agents. -## Tactics (IN PROGRESS) +## Tactics (COMPLETED) [Privilege Escalation](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/PrivilegeEscalation.md) +[Initial Access](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/InitialAccess.md) + + +## Tactics (IN PROGRESS) + [Defense Evasion](https://github.com/keyboardcrunch/SentinelOne-ATTACK-Queries/blob/master/DefenseEvasion.md) @@ -29,4 +34,4 @@ This project aims to document SentinelOne Deep Visibility queries for detecting [Lateral Movement]() -[Initial Access]() +