研究进攻性安全构建更好的防御体系

Operationalizing MITRE ATT&CK®StudyingOffensive Securityto Build aBetter Defense® 2024 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.whomaiStephen AldrichSenior Information Security SpecialistSt Charles Health SystemCISSP, CEH, OSCP, CySA+, Security+Lockheed Martin Cyber Kill Chain®® CYBER KILL CHAIN is a registered trademark of Lockheed Martin Corporationhttps://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.htmlDavid Bianco’s Pyramid of PainATT&CKhttps://detect-respond.blogspot.com/2013/03/the-pyramid-of-pain.htmlWhat is MITRE ATT&CK?https://www.mitre.org/who-we-are/our-storyhttps://attack.mitre.org/ATT&CK Matrixhttps://attack.mitre.org/matrices/enterprise/ Tactics, Techniques & Procedureshttps://attack.mitre.org/matrices/enterprise/https://nsarchive.gwu.edu/sites/default/files/documents/3891751/SANS-and-Electricity-Information-Sharing-and.pdf How can we use ATT&CK?Threat IntelligenceDetection AnalysisAdv