Cyber Solutions Fest: Level MITRE ATT&CK Framework

You are probably aware and knowledgeable about MITRE ATT&CK, BUT what happens when its not applied well? With the pandemic, it brought the rise of working remotely, which increased inefficient communications and burnout and adversaries used it in their favor when exploiting companies around the world. With a 400% increase of breaches in 2020, companies need to become much more aware of techniques that adversaries use to attack, in order to plan and respond better, faster. The best way to have strong security is acknowledging its not about whether or not a breach will occur, its the unknown of when. Its also knowing that attackers only need one way in, but attackers only need to slip up once to get caught. When using MITRE ATT&CK properly, it cuts down on remediation time and places your security in a better spot. It also provides a greater resilience while empowering your security team with the knowledge of how an adversary attacks.

It has been proven over and over again that collecting and filtering data based on knowledge of adversary tactics, techniques, and procedures (TTPs) is an effective method for detecting malicious activity. Having a transparent workflow of detection allows for stronger threat modeling and operations. By operationalizing global threat intelligence through MITRE ATT&CK, it provides a profile activity for more accurate threat hunting, while allowing security teams to have better threat indicators to inform and prioritize response actions. 

This is the first ever MITRE ATT&CK track at the SANS Cyber Solutions Fest. The focus will be on how to empower security by using MITRE ATT&CK, how to have a resilient security team by mapping security control gap analysis with the framework, lessons learned while utilizing the framework, new aspects to the framework, and the latest developments for applying the framework to the cloud.