MITRE ATT&CK™ February 9, 2021 Howard Poston MITRE ATT&CK framework mitigations: An overview The MITRE ATT&CK framework is a tool developed by the MITRE Corporation that is intended to help with understanding how cyberattacks can be performed. It...
MITRE ATT&CK™ February 8, 2021 Howard Poston MITRE ATT&CK framework techniques, sub-techniques & procedures The MITRE ATT&CK framework is a tool developed by the MITRE Corporation to aid understanding and discussion of cyberattacks. MITRE ATT&CK takes the...
MITRE ATT&CK™ December 28, 2020 Kurt Ellzey MITRE Shield: An active defense and adversary engagement knowledge base When it comes to collecting tips, tricks and workarounds, it is easy to see quickly that certain concepts and methods are strong against particular setups,...
MITRE ATT&CK™ November 11, 2020 Howard Poston 7 Steps of the MITRE ATT&CK®-based Analytics Development Method The MITRE ATT&CK-based analytics development method is a process of using red and blue team engagements to develop and improve the analytics used to detect...
MITRE ATT&CK™ November 11, 2020 Howard Poston How to Use MITRE ATT&CK® to Map Defenses and Understand Gaps The MITRE ATT&CK® framework is a useful way to standardize cybersecurity terminology and provides a framework for organizations to plan and evaluate...
MITRE ATT&CK™ November 11, 2020 Howard Poston Using MITRE ATT&CK®-based analytics for threat detection: 5 principles A number of traditional methods for threat detection exist; however, cyber threat actors have developed methods for evading these, such as: Tool Testing:...
MITRE ATT&CK™ November 11, 2020 Howard Poston Use cases for implementing the MITRE ATT&CK® framework The MITRE ATT&CK ® framework is a vast repository of cybersecurity knowledge. Each of the MITRE ATT&CK framework outlines a number of goals that...
MITRE ATT&CK™ November 11, 2020 Howard Poston How to Use the MITRE ATT&CK® Framework and the Lockheed Martin Cyber Kill Chain Together The Lockheed Martin Cyber Kill Chain is the first attempt to describe the structure and lifecycle of a cyberattack. It breaks a cyberattack into seven discrete...
MITRE ATT&CK™ November 10, 2020 Howard Poston How to use the MITRE ATT&CK® framework and diamond model of intrusion analysis together The Diamond Model of Intrusion Analysis is based upon the premise that every cyberattack consists of an adversary using some capability over infrastructure...
MITRE ATT&CK™ November 10, 2020 Howard Poston MITRE ATT&CK® Framework Tactics: An Overview The MITRE ATT&CK® framework is designed to provide information about cybersecurity and the methods by which an attacker can achieve certain goals that...