attack_component — telemetry-kind tag

Meaning and evidence boundary

Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.

Related pages

• Active Directory Credential Request · telemetry
• Active Directory Object Access · telemetry
• Active Directory Object Creation · telemetry
• Active Directory Object Deletion · telemetry
• Active Directory Object Modification · telemetry
• Active DNS · telemetry
• API Calls · telemetry
• Application Assets · telemetry
• Application Log Content · telemetry
• Application Permission · telemetry
• Application State · telemetry
• Asset Inventory · telemetry
• Certificate Registration · telemetry
• Cloud Service Disable · telemetry
• Cloud Service Enumeration · telemetry
• Cloud Service Metadata · telemetry
• Cloud Service Modification · telemetry
• Cloud Storage Access · telemetry
• Cloud Storage Creation · telemetry
• Cloud Storage Deletion · telemetry
• Cloud Storage Enumeration · telemetry
• Cloud Storage Metadata · telemetry
• Cloud Storage Modification · telemetry
• Command Execution · telemetry
• Container Creation · telemetry
• Container Enumeration · telemetry
• Container Start · telemetry
• Device Alarm · telemetry
• Domain Registration · telemetry
• Drive Access · telemetry
• Drive Creation · telemetry
• Drive Modification · telemetry
• Driver Load · telemetry
• Driver Metadata · telemetry
• File Access · telemetry
• File Creation · telemetry
• File Deletion · telemetry
• File Metadata · telemetry
• File Modification · telemetry
• Firewall Disable · telemetry
• Firewall Rule Modification · telemetry
• Firmware Modification · telemetry
• Group Enumeration · telemetry
• Group Metadata · telemetry
• Group Modification · telemetry
• Host Status · telemetry
• Image Creation · telemetry
• Image Metadata · telemetry
• Image Modification · telemetry
• Instance Creation · telemetry
• Instance Deletion · telemetry
• Instance Enumeration · telemetry
• Instance Metadata · telemetry
• Instance Modification · telemetry
• Instance Start · telemetry
• Instance Stop · telemetry
• Kernel Module Load · telemetry
• Logon Session Creation · telemetry
• Logon Session Metadata · telemetry
• Malware Content · telemetry
• Malware Metadata · telemetry
• Module Load · telemetry
• Named Pipe Metadata · telemetry
• Network Communication · telemetry
• Network Connection Creation · telemetry
• Network Share Access · telemetry
• Network Traffic Content · telemetry
• Network Traffic Flow · telemetry
• OS API Execution · telemetry
• Passive DNS · telemetry
• Permissions Request · telemetry
• Pod Creation · telemetry
• Pod Enumeration · telemetry
• Process Access · telemetry
• Process Creation · telemetry
• Process History/Live Data · telemetry
• Process Metadata · telemetry
• Process Modification · telemetry
• Process Termination · telemetry
• Process/Event Alarm · telemetry
• Protected Configuration · telemetry
• Response Content · telemetry
• Response Metadata · telemetry
• Scheduled Job Creation · telemetry
• Scheduled Job Metadata · telemetry
• Scheduled Job Modification · telemetry
• Script Execution · telemetry
• Service Creation · telemetry
• Service Metadata · telemetry
• Service Modification · telemetry
• Snapshot Creation · telemetry
• Snapshot Deletion · telemetry
• Snapshot Metadata · telemetry
• Snapshot Modification · telemetry
• Social Media · telemetry
• Software · telemetry
• System Notifications · telemetry
• System Settings · telemetry
• User Account Authentication · telemetry
• User Account Creation · telemetry
• User Account Deletion · telemetry
• User Account Metadata · telemetry
• User Account Modification · telemetry
• Volume Creation · telemetry
• Volume Deletion · telemetry
• Volume Modification · telemetry
• Web Credential Creation · telemetry
• Web Credential Usage · telemetry
• Windows Registry Key Access · telemetry
• Windows Registry Key Creation · telemetry
• Windows Registry Key Deletion · telemetry
• Windows Registry Key Modification · telemetry
• WMI Creation · telemetry