World-class instructors teaching today's, critical cyber skills - SANS Online Training

Reading Room

Subscribe to SANS Newsletters

Join the SANS Community to receive the latest curated cyber security news, vulnerabilities and mitigations, training opportunities, and our webcast schedule.

Analyst Papers

Featuring 473 Papers as of April 28, 2021

To download the Analyst Papers, you must be a member of the Community. Upon joining the community, you will have unlimited access to Analyst Papers and all associated webcasts, including the ondemand version where you can download the slides.

You must be a member of the Community to view this paper

  • Contextualizing the MITRE ATT&CK Framework by Matt Bromiley - April 27, 2021 

    Getting the right data to test security controls effectively is easier said than done. Too often, organizations are testing attacker techniques without the context necessary to build effective security control tests. While the MITRE ATT&CK framework provides useful information, when used in conjunction with threat intel reports it can provide a deeper understanding of how, why, and when attackers may abuse a technique. Using real-world examples, this paper shows you how to build efficient, life cycle-appropriate tests that identify visibility gaps and more in order to improve your defenses.

  • View All Analyst Papers

Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact

All papers are copyrighted. No re-posting or distribution of papers is permitted. Graduate Student Research - This paper was created by a SANS Technology Institute student as part of the graduate program curriculum.