Loading ATT&CK
Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice
Each is its own technique in the catalogue, with its own detections.
Every one carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| PowerShell Keylogging Script | High |
| Prompt for Credentials with Osascript | High |
| Suspicious pbpaste High Volume Activity | Medium |
| Potential Sudo Hijacking | Medium |
| Potential SSH Password Grabbing via strace | Medium |
| Azure secure score MFA registration V2 | Unknown |
| Azure secure score MFA registration V2 | Medium |
| DNS Query Request To OneLaunch Update Service | Low |
| Suspicious Network Communication With IPFS | Low |
Showing 9 of 9