Videos

Leadership Spotlight: Attack Flow with Steve Benton (Anomali)

In Episode 3 of the Center for Threat-Informed Defense’s “Leadership Spotlight” video series, Steve Benton, VP Research & General Manager at Anomali, discusses the Center’s Attack Flow Project.

Continue reading

Level Up Threat Intel with Attack Flow with Mark Haase (at Purple Hats!)

From the 2023 Purple Hats Conference: Mark Haase, Chief Engineer at the Center for Threat-Informed Defense, highlights how Attack Flow models sequences of ATT&CK techniques to make threat intelligence more powerful and visual. https://www.purplehats.org/

Continue reading

Adoption Spotlight: Picus Adopts Top ATT&CK Techniques

Center for Threat-Informed Defense’s Cyber Engagement Lead Maggie MacAlpine talks to Picus Lab leaders (Co-Founder and Vice President, Dr. Suleyman Ozarlan, and Product Marketing Leader Simon Monahan) about their adoption of the Center’s Top ATT&CK Techniques project.

Continue reading

Micro Emulation Plans: Making Adversary Emulation Accessible

Adversary emulation plans are an excellent way to validate defenses against known adversarial behaviors, but they can be cost prohibitive and very complex to execute. We wanted to lower the barrier to entry by creating smaller scale adversary emulation plans that are easy to automate and focus on …

Continue reading

Leadership Spotlight: Attack Flow with Derek Manky (Fortinet)

In this second episode in the Center for Threat-Informed Defense’s ‘Leadership Spotlight’ video series, Derek Manky, Chief Security Strategist & VP Global Threat Intelligence at Fortinet’s FortiGuard Labs, discusses the Center’s Attack Flow project.

Continue reading

Leadership Spotlight: Top ATT&CK Techniques with Joel Spurlock (Joel Spurlock, Senior Director of Malware Research, CrowdStrike)

In this first episode of the Center for Threat-Informed Defense’s “Leadership Spotlight” video series, Joel Spurlock, Senior Director of Malware Research at CrowdStrike, discusses the Center’s Top ATT&CK Techniques project.

Continue reading

Center Demo: Introducing ATT&CK Powered Suit

In this video we showcase ATT&CK Powered Suit, a freely available Chrome Extension that puts the MITRE ATT&CK® knowledge base at your fingertips. This extension enables quick searches for tactics, techniques and more without disrupting your workflow.

Continue reading

Center Conversations: Building the Language of Threat-Informed Defense with Alex Pinto (Verizon)

The Center for Threat-Informed Defense’s ATT&CK Integration into VERIS project aims to help practitioners connect VERIS with MITRE ATT&CK and obtain more context about the threats they face. Verizon participated in this project and Alex Pinto, Senior Manager of their Data Breach …

Continue reading

Center Conversations: Building a Sightings Ecosystem with Derek Manky (Fortinet)

As a vital piece of advancing threat-informed defense is ensuring that we have the most accurate and up-to-date understanding of adversary behavior, the Center for Threat-Informed Defense launched the Sightings Ecosystem project, which collects and analyzes reports of MITRE ATT&CK® techniques …

Continue reading

Center Conversations: Enabling Threat-Informed Defense with Carl Wright

Facing ever-evolving cybersecurity threats, organizations of all sizes need to be better able to assess potential threats and assess their security posture. This is where an effective threat-informed defense can play an important role.

In this Center Conversation, Carl Wright, Chief Commercial …

Continue reading