DET0866 Detection of Search Threat Vendor Data

Technique Detected: T1681 (Search Threat Vendor Data)

Analytics

PRE

AN1998

Much of this activity may have a very high occurrence and associated false positive rate, as well as potentially taking place outside the visibility of the target organization, making detection difficult for defenders.

Log Sources

Mutable Elements