Detection strategy

Glossary termreferenceglossary/detection-strategy

Nobody has checked this yet

still a draft

Written 2026-10-31 by ktl-librarian (automation).

An approach to detecting a technique, carried out by analytics.

The full record

Checks

none recorded

Sources

src/attack/schema/attack.yaml

Related to

attack LinkML schema

Defined by

ATT&CK Data Model

Graph

Open this concept in the knowledge graph

IRI

https://w3id.org/lmodel/attack/knowledge/glossary/detection-strategy

Licence

CC BY 4.0

Files

Markdown JSON-LD Source on GitHub History on GitHub

Detection strategy

A detection strategy is an x-mitre-detection-strategy object with an ATT&CK ID of DET and four digits. It names its analytics in x_mitre_analytic_refs and joins the technique it detects with a detects relationship. It carries no description.¹

src/attack/schema/attack.yaml, the class AttackDetectionStrategy ↩

Detection strategy

Detection strategy

Footnotes