Overview
Explore the application of MITRE ATT&CK framework in blue team operations through this insightful 20-minute conference talk. Gain a comprehensive understanding of the ATT&CK matrix, attack techniques, and their relevance to defensive cybersecurity strategies. Learn how to conduct effective gap analysis and leverage Event Query Language to enhance your organization's threat detection capabilities. Discover practical approaches to mapping your blue team's efforts to the MITRE ATT&CK framework, enabling more robust and targeted defense mechanisms against evolving cyber threats.
Syllabus
Introduction
What is ATTCK
Attack Matrix
Disclaimer
Overview
Attack Techniques
Gap Analysis
Event Query Language
Outro
Taught by
Cooper