Course Outline
Introduction
Understanding Malware
- Classification of malware types
- The historical evolution of malware
Malware Attack Overview
- Propagating mechanisms
- Non-propagating mechanisms
ATT&CK Matrices
- Enterprise ATT&CK
- Pre-ATT&CK
- Mobile ATT&CK
MITRE ATT&CK Framework
- The 11 core tactics
- Specific techniques
- Observed procedures
Development Environment Setup
- Configuring a version control hub (GitHub)
- Retrieving a project containing a to-do list data system
- Installation and configuration of ATT&CK Navigator
Monitoring a Compromised System (WMI)
- Implementing command-line scripts for lateral movement attacks
- Leveraging ATT&CK Navigator to detect compromise indicators
- Evaluating the breach using the ATT&CK framework
- Executing process monitoring
- Identifying and remedifying gaps in the defense architecture
Monitoring a Compromised System (EternalBlue)
- Implementing command-line scripts for lateral movement attacks
- Leveraging ATT&CK Navigator to detect compromise indicators
- Evaluating the breach using the ATT&CK framework
- Executing process monitoring
- Identifying and remedifying gaps in the defense architecture
Summary and Concluding Remarks
Requirements
- Familiarity with information system security principles
Target Audience
- Information systems analysts
Testimonials (2)
- Understanding that ATT&CK creates a map that makes it easy to see, where an organization is protected and where the vulnerable areas are. Then to identify the security gaps that are most significant from a risk perspective. - Learn that each technique comes with a list of mitigations and detections that incident response teams can employ to detect and defend. - Learn about the various sources and communities for deriving Defensive Recommendations.
CHU YAN LEE - PacificLight Power Pte Ltd
Course - MITRE ATT&CK
All is excellent
