Discovery (34 techniques)

Learning about the environment after gaining access — accounts, services, network topology.

The Discovery tactic groups MITRE ATT&CK techniques used by adversaries tolearning about the environment after gaining access — accounts, services, network topology. Each technique below has its own page with detection guidance, platforms, and sub-techniques.

Detection engineering training, taught by practitioners.

Learn how to build real detections across the MITRE ATT&CK framework.

View Courses