Attack Flow v3
With Attack Flow, you will capture the entire attack and communicate what matters!
June 7, 2023
Project Summary
This project developed an approach and prototype tool for creating narrative cyber threat intel reports that analysts need in the form they need them. Reports produced using CTI Blueprints include structured STIX content, are tagged with ATT&CK reference, and enable operational defensive cyber analysis, analytics testing, and adversary emulation. We will establish a new normal for cyber threat intelligence. Producers will create actionable intelligence for their consumers, and consumers will take specific threat-informed action.
Problem
Threat intel producers need clear and concrete guidance and tools to create finished intelligence that meet defenders’ needs.
Solution
Answer defenders’ critical questions through actionable intelligence reports created from expert-developed templates that reflect defenders’ use cases.
Impact
Threat intelligence producers create actionable intelligence that their users can operationalize immediately.
Funding Research Participants
Explore More of Our Work:
Threat-Informed Defense for the Financial Sector
Connect adversarial threat mitigations to cybersecurity program resources tailored to the financial sector, namely the Cyber Risk Institute …
Ambiguous Techniques
Building upon the research of Summiting the Pyramid, Ambiguous Techniques is a methodology to determine malicious intent behind seemingly benign …
Stay Informed
Sign up for our "Stay Informed" mailing list to receive announcements for project publications, upcoming events, and other news about the Center.