| Technique | Network Security Appliances (T1590.006) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbooks
Daily MITRE ATT&CK-based detection playbooks covering common adversary techniques. Each playbook includes SIEM-agnostic detection logic and investigation and response guidance.
Detection Playbook: IP Addresses (T1590.005)
| Technique | IP Addresses (T1590.005) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbook: Network Topology (T1590.004)
| Technique | Network Topology (T1590.004) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbook: Network Trust Dependencies (T1590.003)
| Technique | Network Trust Dependencies (T1590.003) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbook: DNS (T1590.002)
| Technique | DNS (T1590.002) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbook: Domain Properties (T1590.001)
| Technique | Domain Properties (T1590.001) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbook: Gather Victim Network Information (T1590)
| Technique | Gather Victim Network Information (T1590) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbook: Employee Names (T1589.003)
| Technique | Employee Names (T1589.003) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbook: Email Addresses (T1589.002)
| Technique | Email Addresses (T1589.002) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Detection Playbook: Credentials (T1589.001)
| Technique | Credentials (T1589.001) |
| Tactic | Reconnaissance |
| Platforms | PRE |