Pick a tactic, technique, or sub-technique

Pick any technique in the sidebar to get started. Each entry covers procedure examples, data sources, detection queries, false-positive guidance, and response steps.