Using MITRE ATT&CK as an Operational Framework: Prioritizing, Testing, and Sustaining Defense

Thu, Mar 19, 2026
Duration: 1 Hour
English
Christopher Crowley & Frank Duff
Technical Presentation

Thank You To Our Sponsor

The MITRE ATT&CK framework has become a cornerstone for understanding, mapping, and improving cybersecurity defenses, but turning that knowledge into measurable results is where many teams struggle.

Join SANS Instructor Chris Crowley and Tidal Cyber Co-Founder and Chief Innovation Officer Frank Duff on March 19, 2025, at 3:30 p.m. ET to explore how to move beyond theory and operationalize MITRE ATT&CK across your environment. You’ll learn how to prioritize threats relevant to your sector, map defensive coverage to tactics and techniques, and continuously validate your confidence levels with simulations and real-world testing. Join us to discover how leading organizations are using ATT&CK to transform visibility into action and complexity into confidence.

Using MITRE ATT&CK® as an Operational Framework: Prioritizing, Testing, and Sustaining Defense

Associated White Paper

Cybersecurity practitioners today operate in an environment defined by constant change, incomplete information, and real operational consequences. New adversary techniques emerge faster than controls can be deployed, tools are added faster than they can be fully understood, and defenders are expected to explain why certain gaps existed and why specific tradeoffs were made.

Read Now

Two People Smiling While Surrounded by Books and a Laptop

Meet Your Speakers

Christopher Crowley

Independent Consultant

Christopher Crowley, a SANS Senior Instructor, has 25 years of industry experience managing and securing networks. He has authored numerous courses and is considered a leading expert in building an effective SOC.

Learn more

Frank Duff

Chief Innovation Officer and Co-Founder

Frank Duff is a distinguished thought leader in threat-informed defense, specializing in the assessment of organizations and security capabilities.