kevmap

TechniquesT1683.002 › AN2061

AN2061 Analytic 2061

PRE · attack.mitre.org · ATT&CK Enterprise v19.2

<p>Much of this takes place outside the visibility of the target organization, making detection difficult for defenders.</p><p>Detection efforts may be focused on related stages of the adversary lifecycle, such as during Initial Access.</p>
Detects
T1683.002 Audio-Visual Content
Part of
DET0918 Detection of Audio-Visual Content

Log sources and channels

Exactly as MITRE states them in x_mitre_log_source_references. Where a channel is vague, it is vague in the source; kevmap does not tidy it.

Log sourceChannelData component