Skip to content
MITRE ATT&CK Blog

What Comes After Detection Rules? Smarter Detection Strategies in ATT&CK

Objectivity score: 51
Featured What Comes After Detection Rules? Smarter Detection Strategies in ATT&CK By Updated: October 22, 2025 Key updates: - Website example images added - No more Log Source SDO → log sources now live as a x_mitre_log_sources field on the Data Components SDO. - No more SRO between Data Components and Techniques → Techniques now map to Detection Strategy SDOs. Defenders have often used ...