MITRE ATT&CKCON 3.0
Conference: Knowledge for the Masses: Storytelling with ATT&CK!
Date: March 29th, 2022
The Trellix team believes that creating and sharing compelling stories about cyber threats -with ATT&CK- is a powerful way for raising awareness and enabling actionability against cyber threats. In this talk the team will share their experiences leveraging ATT&CK to disseminate Threat knowledge to different audiences (Software Development teams, Managers, Threat detection engineers, Threat hunters, Cyber Threat Analysts, Support Engineers, upper management, etc.).
They will show concrete examples and representations created with ATT&CK to describe the threats at different levels, including:
1) An Attack Path graph that shows the overall flow of the attack;
2) Tactic-specific TTP summary tables and graphs;
3) Very detailed, step-by-step description of the attacker's behaviors.
Slides: https://www.slideshare.net/MITREATTACK/knowledge-for-the-masses-storytelling-with-attck