Summiting the Pyramid
Summiting the Pyramid helps defenders measure the depth and quality of detection coverage beyond an ATT&CK heatmap. This release introduces …
July 28, 2022
Project Summary
The Cloud Analytics project sought to advance the state of the practice by developing a blueprint for writing analytics for cloud platforms. To create the blueprint, the team “learned by doing” – exercising adversary behaviors, developing analytics, and refining them. Lessons learned were gathered along the way and incorporated into the analytics blueprint shared with the community.
Problem
Defenders achieve sufficient visibility of adversary behaviors in on-premises environments, but they struggle to achieve comparable visibility in cloud environments.
Solution
Developed a foundational set of cloud analytics for key TTPs and captured best practices and lessons learned in an analytics blueprint document.
Impact
Improves defenders’ ability to develop analytics to detect adversary behaviors in cloud environments.
Funding Research Participants
Explore More of Our Work:
Attack Flow
Attack Flow helps defenders capture the entire scope of a cyber attack and communicate what matters. By representing actions, conditions, and …
Secure AI
A collaboration with MITRE ATLAS™ to advance security for AI–enabled systems that takes a threat-informed approach, enables rapid exchange of new …
Stay Informed
Sign up for our "Stay Informed" mailing list to receive announcements for project publications, upcoming events, and other news about the Center.