#MITRE ATT&CK

Menu: SIEM → MITRE ATT&CK

Best for: Operators + detection engineering + reporting

This page provides a technique-centric lens across alerts/events.

Use it for: - ATT&CK alignment and coverage discussions - investigation context (tactics/mitigations/software) - validating detection coverage (including Atomic tests, when available)

Related power feature: - MITRE ATT&CK integration