Published Projects

Summiting the Pyramid

December 17, 2024

Project Summary

Summiting the Pyramid (STP) creates a methodology to score analytics against the pyramid of pain, helping defenders create more robust detections against adversary behavior. With this update, STP reduces false positives and expands scoring to network-based analytics.

Problem

Adversaries can easily evade cyber analytics that are dependent on specific tools or artifacts.

Solution

Create and apply a methodology to evaluate the dependencies inside analytics and make them more robust by focusing on adversary behaviors.

Impact

Shift the advantage towards defenders with improved analytics that catch adversaries even as they evolve and detect future campaigns.


Funding Research Participants


Explore More of Our Work:

Threat-Informed Defense for Cloud Security

Use our latest mappings to replace assumption-driven cloud defense with evidence-based decisions to stop cloud adversaries in their tracks. With …

Continue reading

INFORM Your Defense

MITRE INFORM is a program-level assessment designed to show how threat-informed your organization is and where to improve next across cyber …

Continue reading

Attack Flow v3

With Attack Flow, you will capture the entire attack and communicate what matters!

Continue reading

Stay Informed

Sign up for our "Stay Informed" mailing list to receive announcements for project publications, upcoming events, and other news about the Center.