Explore a comprehensive conference talk on leveraging the MITRE ATT&CK framework to enhance threat intelligence and cyber defense capabilities. Delve into techniques, challenges, and industry examples while learning how to structure attacks, analyze threat groups, and implement effective detection strategies. Gain insights on handling false positives, utilizing machine learning, and creating feedback loops for improved targeting. Discover practical tips for getting started with MITRE ATT&CK, managing analytics, and addressing common issues such as misattribution and attack similarities. Enhance your understanding of cyber defense priorities and learn how to navigate the increasing amounts of data in the field.
ATT&CKing the Status Quo - Improving Threat Intel and Cyber Defense with MITRE ATT&CK