Telemetry Library

Detection inputs, common providers, configuration guidance, synthetic event examples and links to relevant simulations, tools and detection workspaces.

Explore the matrix

Interactive ATT&CK & ATLAS Matrix — browse Enterprise, Mobile, ICS and AI technique pages by tactic.

Apply the evidence in a hunt

Threat Hunting field guide — scope a hypothesis, prove telemetry readiness, review findings, and validate defensive handoffs. Reference coverage does not demonstrate local detection efficacy.

Complete reference directory

Connected ecosystem references

Explore the three modules

Attack Tools · Attack Simulations · Detection Rules · Telemetry · Tags

Native security log sources

Security log-source library groups concrete producers and formats separately from ATT&CK data components. Samples carry provenance and version limits; associations do not prove collection coverage.

Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.