MITRE ATT&CK
Menu: Alerts → MITRE ATT&CK Best for: Operators + detection engineering + reporting This page provides a technique-centric lens across alerts/events. Use it for:- ATT&CK alignment and coverage discussions
- investigation context (tactics/mitigations/software)
- validating detection coverage (including Atomic tests, when available)

