The MITRE ATT&CK framework is a tool to help security teams create a more effective security defense. ATT&CK uses open standards and is essentially a database of documented threat behaviors.
Using the ATT&CK framework, analysts can track threat actor behavior to speed up incident response and investigation. When combined with a SIEM or UEBA solution, ATT&CK bridges the gap between why an alert is firing and what it means.
In this webinar, we will look at how security analysts can use the ATT&CK framework to more quickly understand how an alert relates to a larger attack so they can take the necessary steps to protect their business.
Key takeways:
- What is the MITRE ATT&CK framework
- How MITRE ATT&CK improves detection and response
- How to reference ATT&CK tactics and techniques in an investigation
