Detection StrategyEnterprise
DET0222: Detecting MMC (.msc) Proxy Execution and Malicious COM Activation
Official MITRE ATT&CK object mirrored from source data.
MITRE ATT&CK® Reference
Detections
Detection strategies and analytics from ATT&CK where present.
2,986 records · validated library
Detections results
Results are validated against normalized ATT&CK source records when available; sample records are used only in development or empty-data environments.
Detection StrategyEnterprise
DET0044: Detecting Malicious Browser Extensions Across Platforms
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0506: Detecting Mshta-based Proxy Execution via Suspicious HTA or Script Invocation
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0593: Detecting OS Credential Dumping via /proc Filesystem Access on Linux
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0486: Detecting Odbcconf Proxy Execution of Malicious DLLs
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0440: Detecting PowerShell Execution via SyncAppvPublishingServer.vbs Proxy Abuse
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0470: Detecting Protocol or Service Impersonation via Anomalous TLS, HTTP Header, and Port Mismatch Correlation
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0528: Detecting Remote Script Proxy Execution via PubPrn.vbs
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0235: Detecting Steganographic Command and Control via File + Network Correlation
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0550: Detecting Suspicious Access to CRM Data in SaaS Environments
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0567: Detecting Unauthorized Collection from Messaging Applications in SaaS and Office Environments
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0541: Detection Strategy for /proc Memory Injection on Linux
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0345: Detection Strategy for Abuse Elevation Control Mechanism (T1548)
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0033: Detection Strategy for Accessibility Feature Hijacking via Binary Replacement or Registry Modification
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0373: Detection Strategy for Addition of Email Delegate Permissions
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0531: Detection Strategy for Additional Cloud Credentials in IaaS/IdP/SaaS
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0362: Detection Strategy for AppCert DLLs Persistence via Registry Injection
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0017: Detection Strategy for Application Shimming via sdbinst.exe and Registry Artifacts (Windows)
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0332: Detection Strategy for AutoHotKey & AutoIT Abuse
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0428: Detection Strategy for Bind Mounts on Linux
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0237: Detection Strategy for Boot or Logon Initialization Scripts: RC Scripts
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0459: Detection Strategy for Build Image on Host
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0545: Detection Strategy for Cloud Administration Command
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0539: Detection Strategy for Cloud Application Integration
Official MITRE ATT&CK object mirrored from source data.
Detection StrategyEnterprise
DET0169: Detection Strategy for Cloud Infrastructure Discovery
Official MITRE ATT&CK object mirrored from source data.
Source: MITRE ATT&CK®. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation. Glexia is not affiliated with or endorsed by MITRE.