It's Just a Jump To The Left (of Boom)
summary
Shows that teams face 9,000+ open-source detection rules and 2,100+ offensive test scripts mapped to ~500 MITRE ATT&CK techniques, and describes building an open source web app called the Control Validation Compass that queries those repos and maps controls to an ATT&CK heatmap. Gives a concrete win: a stealer named jester steeler is spotted on Malware Bazaar, a detection rule is produced and pushed to users about a month before other vendors flag it, demonstrating the toolchain and process actually shortening detection lead time.
AI-written summary · about
chapters (10)
- 0:00Welcome
- 1:09Speakers
- 3:16Intelligence drives detection
- 6:25Ransomware anatomy
- 8:08Communicating with ATT&CK
- 9:11Jester Stealer detection
- 10:55Threat modeling
- 12:37Control Validation Compass
- 18:56Compass applied to Jester
- 22:53Q&A
related talks
58mMITRE ATT&CK for Developers
48mMITRE ATT&CK: The Play at Home Edition
01h 47mMITRE ATT&CK Fundamentals
27mGet Your Security Priorities Straight! How to Identify Workloads Und...
31mDon't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity
30mThe SOC Counter ATT&CK
11mReimagining the MITRE ATT&CK F...
21mUnderstanding the Latest Mitre Att&Ck Evaluation Data