How to Counter MITRE ATT&CK with MITRE D3FEND

Ғылым және технология

MITRE and the NSA are advising organizations to implement the D3FEND framework in their security plans. This framework provides all the actions needed for security teams to counter the attacker actions defined in the Attacker Tactics and Techniques (ATT&CK) framework. In this video, we cover the following:
► How D3FEND relates to ATT&CK
► The benefits of D3FEND
► Practical tips for using D3FEND to improve your security readiness
Speaker: John S. Mancini, PhD. Group Product Manager for Detect for SaaS
00:00 Introduction to MITRE ATT&CK and MITRE D3FEND
02:08 Who is MITRE?
05:23 The origins of the MITRE ATT&CK Framework
07:16 What is the MITRE ATT&CK Matrix
09:14 MITRE ATT&CK Framework updates
11:14 How to understand the MITRE ATT&CK Framework
14:02 The anatomy of a MITRE ATT&CK Technique
16:05 How to use the MITRE ATT&CK Framework
16:18 The MITRE ATT&CK Navigator
16:57 Communicating around cyberattacks
18:40 Mapping and documenting the current coverage around the attack
19:47 Building defense to prevent a cyberattack
20:45 MITRE ATT&CK limitations
24:28 What is the MITRE D3FEND framework?
25:43 The History of the MITRE D3FEND framework
27:42 The anatomy of a MITRE D3FEND countermeasure
28:54 The MITRE D3FEND Navigator
29:38 How to start using MITRE D3FEND
31:19 Key takeaways about MITRE ATT&CK and MITRE D3FEND
32:40 How Vectra leverages the MITRE frameworks
35:03 Q&A around MITRE ATT&CK and D3FEND
More information: www.vectra.ai
► Website: www.vectra.ai/solutions/mitre...
► Ask a question on MITRE: support.vectra.ai/s/article/K...
► Blog: www.vectra.ai/blogpost/achiev...
► Solution Brief: How Vectra Supports the MITRE Enterprise ATT&CK Framework www.vectra.ai/resources/cb-mi...

Пікірлер: 4

  • @NunoGuerreiroLive
    @NunoGuerreiroLive Жыл бұрын

    this talk is awesome. Thanks to John and Vectra.

  • @NunoGuerreiroLive
    @NunoGuerreiroLive Жыл бұрын

    Not sure if someone can calrify, but in ATT&CK we have mitigations (not detailed as I see them) but the counter-measures in D3FEND are more detailed from the defend point of view. Is this correct ?

  • @shaqfufu8908
    @shaqfufu89082 жыл бұрын

    This is great didn’t know about defend framework

  • @VectraAI

    @VectraAI

    Жыл бұрын

    Thank you for your feedback! We are glad you found our video of interest. Here is an interesting article about the MITRE D3FEND framework as well: www.vectra.ai/blogpost/mitre-d3fend-framework

Келесі