Using SOAR to Automate ATT&CK Testing

  • Wednesday, 18 Nov 2020 10:30AM EST (18 Nov 2020 15:30 UTC)
  • Speakers: Jake Williams, Jay Spann, Josh Rickard

MITRE ATT&CK is the defacto framework organizations use to track defensive security controls. Identifying detection capabilities, or lack thereof, can be difficult for many organizations.'luckily, some companies have released open-source projects, like Red Canary's Atomic Red Team, to assist security teams with testing those security controls which align with specific ATT&CK Techniques. These projects are great resources for the security community, but correlating detections with these tests is still a manual and time consuming process.

By using Swimlane's security orchestration, automation and response (SOAR) solution, you can automate the testing of your security controls and get a clear view of what you can detect versus what you cannot. In this webinar, you will:

1. Learn how SOAR can help organizations automate the testing of security controls

2. See a clear view of your security defenses using MITRE ATT&CK

3. Preview a new open-source tool recently developed by Swimlane's Deep Dive Research Team

Register now for this November 18th webinar!