Mitre
- Log in to LogRhythm NDR's new UI.
- Click Hunt from the sidebar menu, and then click Activity.
The Activity page appears. - Click Mitre Enterprise ATT&CK™.
The Mitre Enterprise window appears displaying the Mitre table with techniques and sub-techniques. Click the drop-down arrow in a technique entry to view the sub-technique.
A few of the technique entries also display the number of events related to the particular technique.
At the top of the window, the Mac, Windows, Linux, Matrix Coverage, Malicious Software, and Threat Group options are available.- To see the malicious software techniques, click Malicious Software.
To toggle between enable and disable, click next to the particular technique.
A tool tip appears with information about each technique when you hover over them.- To see the various threat groups, click Threat Group.
To toggle between enable and disable, click next to the particular threat group.
A tool tip appears with information about each threat group when you hover over them.
