Synopsis 3:00 Initial problems 4:30 First attempt 5:00 Wrong story 6:25 Correct story (explains to management why is ATT&CK useful) 11:46 I know 'Who', but not 'What' 12:20 ATT&CK gives the 'What', but not it is not complete. You need other sources. 12:37 Heat map 15:00 Knowing is half the battle won 15:15 5-step process 18:00 Outcome 20:00 Top 10 techniques
Synopsis
3:00 Initial problems
4:30 First attempt
5:00 Wrong story
6:25 Correct story (explains to management why is ATT&CK useful)
11:46 I know 'Who', but not 'What'
12:20 ATT&CK gives the 'What', but not it is not complete. You need other sources.
12:37 Heat map
15:00 Knowing is half the battle won
15:15 5-step process
18:00 Outcome
20:00 Top 10 techniques
Well spoken! 👍👍
Question, how do I find information on threat actors?