Explore an approach to developing and executing effective security exercises and practice drills in this 30-minute conference talk from Security BSides San Francisco. Learn how to leverage MITRE's Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) framework to create comprehensive security simulations. Discover the key components of a successful exercise, including story selection, tactics identification, threat modeling, table-top discussions, adversarial emulation, and scoring methods. Gain insights on establishing a robust exercise program that emphasizes repetition, momentum, and muscle memory development. Transform cyber threat intelligence into practiced action through engaging security games, enhancing incident response capabilities and organizational protection.
Overview
Syllabus
BSidesSF 2019 - Shall We Play a Game?
Taught by
Security BSides San Francisco
Related Courses
-
MITRE ATT&CK Defender™ (MAD) ATT&CK® Fundamentals Badge Training
-
Application of the MITRE ATT&CK Framework
-
Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity
3.0 -
The MITRE ATT&CK Framework: Understanding and Applying Adversarial Tactics - 2018
-
Real-World Implications of the MITRE ATT&CK Framework for IT and OT Environments
-
Making Sense of Unstructured Threat Data
