Becoming a Dark Knight - Adversary Emulation Demonstration for ATT&CK Evaluations

Becoming a Dark Knight - Adversary Emulation Demonstration for ATT&CK Evaluations

Explore the world of ethical hacking and adversary emulation in this 43-minute Black Hat conference talk. Dive into the MITRE ATT&CK Evaluations team's approach to improving cybersecurity by emulating advanced threat actors. Learn how they develop scenarios, build malware and tools, and execute operations against major EDR vendors. Discover the process of merging Cyber Threat Intelligence (CTI) and red team development capabilities for adversary emulation, using a Latin American APT as a real-world example. Gain insights into the team's open-source approach and how they justify "becoming the villain" to advance defensive capabilities in the cybersecurity industry.