MITRE ATT&CK

 KQL Library / MITRE ATT&CK

MITRE ATT&CK

Queries that summarize what's been observed in the environment against the MITRE ATT&CK matrix.

← All KQL categories

• Mitre Attack Tactics Observed mitre-attack-tactics-observed.kql

  Events mapped against MITRE ATT&CK Tactics that have been observed in the environment, with percentage of total.

• Mitre Attack Techniques Observed mitre-attack-techniques-observed.kql

  Events mapped against MITRE ATT&CK Techniques that have been observed in the environment, with percentage of total.