Methods to Employ Zeek in Detecting MITRE ATT&CK Techniques

MITRE ATT&CK techniques and their respective detections, while a significant step forward in democratizing threat intelligence, are predominantly focused on endpoint visibility through direct management or via agents. Some detection approaches leverage network sensors (e.g., Zeek) like BZAR...
Michael McPhee
July 15, 2020

All papers are copyrighted. No re-posting of papers is permitted