Skip to content
BackEsc
Connect AISign inSign up free

Other research · publisher

MITRE ATT&CK

34 reports on other research · 44 reports in all

Every mark is a report, newest first. A report opens on its page here, which links to the original.

Connect AI

All of MITRE ATT&CK in Research reports

Every one of the 34 is a mark on the map. Named now: 1 to 26, newest first.

  1. techdoc_lite-deliverables-numbered option.dotx16 Jun 2026PDF
  2. Cross-Platform Detection of Data Transfer to Cloud Account, Detection Strategy DET05736 Apr 2026Web page
  3. Boot or Logon Autostart Execution: Time Providers, Sub-technique T1547.003 - Enterprise6 Apr 2026Web page
  4. Boot or Logon Autostart Execution: LSASS Driver, Sub-technique T1547.008 - Enterprise6 Apr 2026Web page
  5. Patchwork, Hangover Group, Dropping Elephant, Chinastrats, MONSOON, Operation Hangover, Group G00406 Apr 2026Web page

    Hangover Group

  6. Behavioral Detection of User Discovery via Local and Remote Enumeration, Detection Strategy DET00936 Apr 2026Web page
  7. Detection of Remote Access Software, Detection Strategy DET06246 Apr 2026Web page
  8. Command and Scripting Interpreter: AppleScript, Sub-technique T1059.002 - Enterprise6 Apr 2026Web page
  9. Authorization Enforcement, Mitigation M0800 - ICS6 Apr 2026Web page
  10. Event Triggered Execution: LC_LOAD_DYLIB Addition, Sub-technique T1546.006 - Enterprise6 Apr 2026Web page
  11. System Binary Proxy Execution: Control Panel, Sub-technique T1218.002 - Enterprise6 Apr 2026Web page
  12. Boot or Logon Autostart Execution: Security Support Provider, Sub-technique T1547.005 - Enterprise6 Apr 2026Web page
  13. Input Capture: GUI Input Capture, Sub-technique T1056.002 - Enterprise6 Apr 2026Web page
  14. Behavioral Detection of Obfuscated Files or Information, Detection Strategy DET03786 Apr 2026Web page
  15. POWRUNER, Software S01846 Apr 2026Web page
  16. Traffic Signaling (Port-knock / magic-packet → firewall or service activation) – T1205, Detection Strategy DET05246 Apr 2026Web page
  17. Behavior-chain detection for T1132.001 Data Encoding: Standard Encoding (Base64/Hex/MIME) across Windows, Linux, macOS, ESXi, Detection Strategy DET01246 Apr 2026Web page
  18. Detection Strategy for Overwritten Process Arguments Masquerading, Detection Strategy DET01646 Apr 2026Web page
  19. Detection Strategy for T1542.001 Pre-OS Boot: System Firmware, Detection Strategy DET00996 Apr 2026Web page
  20. Detection of Cloud Accounts, Detection Strategy DET08796 Apr 2026Web page
  21. Adversary-in-the-Middle: Evil Twin, Sub-technique T1557.004 - Enterprise6 Apr 2026Web page
  22. ACAD/Medre.A, Software S10006 Apr 2026Web page
  23. Automated File and API Collection Detection Across Platforms, Detection Strategy DET01866 Apr 2026Web page
  24. Detecting Remote Script Proxy Execution via PubPrn.vbs, Detection Strategy DET05286 Apr 2026Web page
  25. SIP and Trust Provider Hijacking Mitigation, Mitigation T1198 - Enterprise6 Apr 2026Web page
  26. Prikormka, Software S01136 Apr 2026Web page

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated