Demo
 

Threat Detection Report

Top Techniques

This chart illustrates how often each ATT&CK technique is leveraged in a confirmed threat in our customers' environments. Click on the techniques with arrows to navigate directly to a section including unique analysis and detection strategies for that technique.

 
 
T1055
Process Injection (17% of total threats)
 
 
T1053
Scheduled Task (13%)
 
 
T1077
Windows Admin Shares (13%)
 
 
T1086
PowerShell (12%)
 
 
T1105
Remote File Copy (9%)
 
 
T1036
Masquerading (7%)
 
 
T1064
Scripting (5%)
 
 
T1038
DLL Search Order Hijacking (5%)
 
 
T1482
Domain Trust Discovery (5%)
 
 
T1089
Disabling Security Tools (5%)
 
 
T1003
Credential Dumping (5%)
 
 
T1035
Service Execution (4%)
 
 
T1047
Windows Management Instrumentation (4%)
 
 
T1085
Rundll32 (3%)
 
 
T1140
Deobfuscate/Decode Files or Information (2%)
 
 
T1093
Process Hollowing (2%)
 
 
T1015
Accessibility Features (2%)
 
 
T1168
Local Job Scheduling (2%)
 
 
T1170
Mshta (2%)
 
 
T1193
Spearphishing Attachment (2%)