Operational Templates for State-Level Attack and Collective Defense of Countries
summary
Operational templates map concrete campaigns — e.g., critical infrastructure control (accessing ICS, undersea cables, satellite jamming), large-scale denial (DNS hijack, cloud insider), influence operations and a decades-long long game (OPM, election influence) — into kill chains tied to MITRE ATT&CK and mapped TTPs. A five‑level collective‑defense maturity model (from isolated orgs to sector‑wide automated response and request for effects) frames what to build: sector SOCs, shared telemetry, exercises and limited offensive interdiction; concept is vetted but largely conceptual, not a finished toolkit.
AI-written summary · about
chapters (32)
- 0:00Introduction
- 0:55Opening remarks
- 1:50Introductions
- 2:34Mission Statement
- 3:47Context
- 4:38Research Arc
- 5:54Defeating Detail
- 6:12Fighting Wars Independently
- 7:36Collective Offense
- 9:50Levers of Power
- 10:52Underwater Cables
- 11:34Electromagnetic Spectrum
- 12:09National Intelligence
- 13:22Global Network
- 14:00Supply Chains
- 14:42Combined Operations
- 15:04Threat Templates
- 21:08Kill Chain Template
- 21:29Cyberspace Denial Strategy
- 22:57Influence Operations
- 23:35Information Operations
- 25:04The Long Game
- 25:45Staircase of Apathy
- 26:47Apathy Threshold
- 28:05Long Game
- 29:30Hybrid
- 36:38Sector Level Situational Awareness
- 37:38Level 3 to 4
- 40:14Collectives
- 40:51What can help
- 42:42Conclusions
- 44:19Questions
related talks
45mFrom Attacks to Action: An Open Community Model to Drive Defensive Choices
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
37mThreats versus Capabilities Building Better Detect and Respond Capabilities
29mThe Blueprint for Enduring Actionable CTI
47mField Guide to Building an Operational Technology Cybersecurity Capability
30mShall We Play a Game?
29mAttack Defense Graph Analysis for Supporting SOC and CSIRT Operations
01h 47mMITRE ATT&CK Fundamentals