Use the Threat Library

Browse

The Threat Library lists threats observed against rail, metro, and broader critical-infrastructure operators. Each entry includes a plain-language summary, affected asset classes, the underlying technique IDs, and a list of Console checks that detect or mitigate it.

Convert to checks

From a threat page, click Add to assessment to include the recommended checks in your next SecOps run.