Course Outline
Introduction
Understanding Malware
- Various types of malware
- The historical evolution of malware
Overview of Malware Attack Vectors
- Propagating attacks
- Non-propagating attacks
ATT&CK Matrices
- Enterprise ATT&CK
- Pre-ATT&CK
- Mobile ATT&CK
Core Components of MITRE ATT&CK
- The 11 tactics
- Specific techniques
- Observed procedures
Preparing the Development Environment
- Setting up a version control repository (GitHub)
- Acquiring a project containing a to-do list data system
- Installing and configuring ATT&CK Navigator
Monitoring Compromised Systems via WMI
- Executing command-line scripts to simulate lateral attacks
- Using ATT&CK Navigator to detect compromises
- Evaluating incidents using the ATT&CK framework
- Implementing process monitoring
- Documenting vulnerabilities and applying patches to defense gaps
Monitoring Compromised Systems via EternalBlue
- Executing command-line scripts to simulate lateral attacks
- Using ATT&CK Navigator to detect compromises
- Evaluating incidents using the ATT&CK framework
- Implementing process monitoring
- Documenting vulnerabilities and applying patches to defense gaps
Summary and Conclusion
Requirements
- Familiarity with information system security principles
Target Audience
- Information systems analysts
Testimonials (2)
- Understanding that ATT&CK creates a map that makes it easy to see, where an organization is protected and where the vulnerable areas are. Then to identify the security gaps that are most significant from a risk perspective. - Learn that each technique comes with a list of mitigations and detections that incident response teams can employ to detect and defend. - Learn about the various sources and communities for deriving Defensive Recommendations.
CHU YAN LEE - PacificLight Power Pte Ltd
Course - MITRE ATT&CK
All is excellent
