Published Projects

Cloud Analytics

Project Summary

The Cloud Analytics project sought to advance the state of the practice by developing a blueprint for writing analytics for cloud platforms. To create the blueprint, the team “learned by doing” – exercising adversary behaviors, developing analytics, and refining them. Lessons learned were gathered along the way and incorporated into the analytics blueprint shared with the community.

Problem

Defenders achieve sufficient visibility of adversary behaviors in on-premises environments, but they struggle to achieve comparable visibility in cloud environments.

Solution

Developed a foundational set of cloud analytics for key TTPs and captured best practices and lessons learned in an analytics blueprint document.

Impact

Improves defenders’ ability to develop analytics to detect adversary behaviors in cloud environments.


Funding Research Participants


Explore More of Our Work:

Threat-Informed Defense for the Financial Sector

Connect adversarial threat mitigations to cybersecurity program resources tailored to the financial sector, namely the Cyber Risk Institute …

Continue reading

Ambiguous Techniques

Building upon the research of Summiting the Pyramid, Ambiguous Techniques is a methodology to determine malicious intent behind seemingly benign …

Continue reading

Prioritize Known Exploited Vulnerabilities

Prioritize Known Exploited Vulnerabilities shows defenders how to take a threat informed approach to vulnerability management.

Continue reading

Stay Informed

Sign up for our "Stay Informed" mailing list to receive announcements for project publications, upcoming events, and other news about the Center.