Techniques › T1681 › AN1998
AN1998 Analytic 1998
PRE · attack.mitre.org · ATT&CK Enterprise v19.2
<p>Much of this activity may have a very high occurrence and associated false positive rate, as well as potentially taking place outside the visibility of the target organization, making detection difficult for defenders.</p>
- Detects
- T1681 Search Threat Vendor Data
- Part of
- DET0866 Detection of Search Threat Vendor Data
Log sources and channels
Exactly as MITRE states them in x_mitre_log_source_references. Where a channel is vague, it is vague in the source; kevmap does not tidy it.
| Log source | Channel | Data component |
|---|