Attack path: Internal Proxy
Kill-chain expansion via actor co-occurrence analysis ·
16 techniques ·
8 detectable
·
8 detection gaps
Entry point: CVE-2026-9595
T1090.001
Other
Resource Dev
Initial Access
Persistence
Priv Escalation
Collection
Entry point (from CVE)
Detection rule available
Detection gap - potential blind spot
Lift = how strongly this technique co-occurs with the entry point across shared threat actors (1x = expected, 5x = highly distinctive)
Hunt package
All 16 techniques in this chain - Sigma rules, Atomic tests, and detection gaps in one view.