Through the ATT&CK framework, MITRE has generated a gold mine of information about the most important tactics and techniques used by attackers and how the blue team can detect and prevent these actions. Blocking atomic attack indicators such as domain names and IP addresses might work in the short term, but understanding the higher-level tactics in ATT&CK helps the blue team identify and anticipate attacker activity at a higher level of abstraction, slowing attackers down and giving defenders a fighting chance.
Attendees at this webcast will learn:
Register today to be among the first to receive the associated whitepaper written by John Hubbard, SANS author and dedicated blue team member.
Click here to register for panel discussion webcast to be held at 1 PM ET on Tuesday, July 28, 2020.