Tag

Detection Engineering

Context to Confidence: The Next Phase of Ambiguous Techniques Research

MITRE CTID’s latest ambiguous techniques research turns context into confidence with minimum telemetry requirements and a confidence scoring model that helps detection engineers pick the right log sources for robust, low-noise detections.

Continue reading

Summiting the Pyramid: Bring the Pain with Robust and Accurate Detection

Summiting the Pyramid (STP) provides a methodology to score analytics against the pyramid of pain, helping defenders create more robust detections against adversary behavior.

Continue reading