Skip to content

Trigger overview tab

Edoardo Gerosa edited this page May 31, 2020 · 1 revision

The trigger overview tab is the heart of the Sysmon threat hunting workbook

alt text

The trigger overview tab displays the following information:

  • Overview of MITRE ATT&CK categories triggered within the selected time range
  • A heatmap grid listing the top triggered techniques within the selected time range
  • A heatmap grid listing the hosts with the most techniques triggered within the selected time range
  • An overview of ATT&CK tactics triggered over time range by selected time interval

A higher definition picture of the Trigger overview tab can be found here.