ATT&CK technique
View on MITRE ATT&CK →
T1562.010
Downgrade Attack
Stealth
deprecated
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Windows AD Computer SPN Modified By User Account | production | 2026-09-25 |
| splunk | Windows AD SPN Unicode Collision Injection | production | 2026-09-25 |
| elastic | Potential HTTP Downgrade Attack | production | 2026-09-18 |
| elastic | Network-Level Authentication (NLA) Disabled | production | 2026-09-18 |
| elastic | Potential NetNTLMv1 Downgrade Attack | production | 2026-09-18 |