Introduction to the MITRE ATT&CK Framework

Course details

With the meteoric rise in cyberattacks, CISOs and company work to fend off these attacks from a variety of sources. Modern cyber attacks are very coordinated and complex in their execution strategies. MITRE ATT&CK framework was created as a tool to understand the anatomy of modern cyber attacks and map out the thought process of hackers. In this course, CISSP certified penetration tester Prashant Pandey provides you with a solid understanding of what this framework is all about and how to add it to your daily activities. After a thorough overview of the MITRE ATT&CK framework, explore the many phases of a cyberattack. Learn how to incorporate MITRE ATT&CK into your security program, threat intelligence program, and security tools. Go over best practices for using the framework, and then dive into a series of case studies to help you understand ways to leverage what you’ve learned.

Concepts

0. Introduction

01 - Course introduction
02 - What you should know

1. Introduction to MITRE ATT&CK

03 - What is MITRE ATT&CK
04 - Why MITRE ATT&CK
05 - Overview of the framework - Part 1
06 - Overview of the framework - Part 2

2. Understanding the Phases of Attack

07 - Reconnaissance
08 - Resource development
09 - Initial access
10 - Execution
11 - Persistence
12 - Privilege escalation
13 - Defense evasion
14 - Lateral movement

3. Implementing MITRE ATT&CK in Practice

15 - Incorporating MITRE ATT&CK into your security program
16 - Using Att&ck to equip threat intelligence
17 - Integrating MITRE ATT&CK with security tools
18 - Best practices for using the framework

4. Case Studies

19 - ATT&CK Navigator
20 - Case study 1
21 - Case study 2
22 - Case study 3

Conclusion

23 - Next steps for continuing your education

Introduction to the MITRE ATT&CK Framework

Authors

Prashant Pandey