One Leg to Stand on: Adventures in Adversary Tracking with ATT&CK - ATT&CKcon 4.0 Day 1 скачать в хорошем качестве

One Leg to Stand on: Adventures in Adversary Tracking with ATT&CK - ATT&CKcon 4.0 Day 1

ATT&CKcon 4.0 Day 1 How many times have you added MITRE ATT&CK techniques to the end of a report and thought you could be doing more? Even though ATT&CK has become an industry standard for cyber threat intelligence reporting, all too often, techniques are thrown at the bottoms of reports and blogs without any context never to be seen again after dissemination. This is not useful for intelligence producers or consumers. Avast ye maties! Within this presentation, we are going to show analysts how they can use ATT&CK as a guideline for creating a contextual knowledge base for adversary tracking. Gone are the days of floundering about looking for information collected about a specific adversary or behavior. Gone are the days of wondering why the rum and context are always gone. Ahoy, me hearties! Hoist up the sails and prepare your sea legs for some swashbuckling adversary tales from the high seas where we will focus on the fickle commodity loader, Qakbot.