Attack path: Valid Accounts
Kill-chain expansion via actor co-occurrence analysis ·
1 technique ·
1 detectable
·
0 detection gaps
Entry point: CVE-2026-10736
T1078
We have the entry-point technique mapped, but not enough shared-actor co-occurrence to chain further techniques with confidence for this one. The entry point and its detection coverage are shown below; other CVEs with richer actor data will expand into a full chain.
Entry point (from CVE)
Detection rule available
Detection gap - potential blind spot
Lift = how strongly this technique co-occurs with the entry point across shared threat actors (1x = expected, 5x = highly distinctive)
Hunt package
All 1 technique in this chain - Sigma rules, Atomic tests, and detection gaps in one view.