Field Notes

Field notes are working references: structured for practical use during an investigation, while remaining explicit about assumptions, telemetry gaps, and the pivots that turn an observation into evidence.

Table of Contents

• Intelligence Resources
• MITRE ATT&CK Field Notes
  • T1105 – Ingress Tool Transfer
  • T1566 – Phishing
• SIEM Query Languages
• Windows Logons
• MAC Addresses