mitre_id technique_name tactic caldera_linux_abilities sample_abilities manual_scenarios falco_detection_rules review_status T1016 System Network Configuration Discovery discovery 3 Network Interface Configuration; Preferred WIFI; Scan WIFI networks - - REVIEW_REQUIRED T1018 Remote System Discovery discovery 3 Collect ARP details; Discover Mail Server; Parse SSH known_hosts - - REVIEW_REQUIRED T1033 System Owner/User Discovery discovery 2 Current User; Identify active user - - REVIEW_REQUIRED T1049 System Network Connections Discovery discovery 1 Find System Network Connections - - REVIEW_REQUIRED T1069.001 Permission Groups Discovery: Local Groups discovery 1 Permission Groups Discovery - - REVIEW_REQUIRED T1071.001 Application Layer Protocol: Web Protocols command-and-control 1 Ragdoll - - REVIEW_REQUIRED T1087.001 Account Discovery: Local Account discovery 1 Find local users - - REVIEW_REQUIRED T1120 Peripheral Device Discovery discovery 1 View printer queue - - REVIEW_REQUIRED T1124 System Time Discovery discovery 1 Get System Time - - REVIEW_REQUIRED T1201 Password Policy Discovery discovery 1 Password Policy - - REVIEW_REQUIRED T1518 Software Discovery discovery 3 Check Chrome; Check Go; Check Python - - REVIEW_REQUIRED