Understanding the Latest Mitre Att&Ck Evaluation Data
summary
Walks through the MITRE ATT&CK 2021 raw data showing a three day test of 174 steps against 30 vendors using real actor playbooks for Carbanak and FIN7 across multi‑platform (Windows + Linux). Uses MITRE’s technique and participant comparison tools, reports SentinelOne at 174/174, Microsoft 151/174, Check Point 162/174, and flags vendor configuration changes counts (Checkpoint ~32, Microsoft ~22, SentinelOne 0). Explains telemetry vs enriched detections and which vendor components (Defender for Endpoint, server, identity, MCAS) are present in the Microsoft build.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:34Agenda
- 2:14What is Mitre Attack
- 4:49The Pyramid of Pain
- 7:05Testing Flow
- 8:57Scoring
- 10:25Configuration Changes
- 11:37Mitre Website
- 13:17Technique Comparison Tool
- 15:10Filtering the Data
- 20:15Conclusion
related talks
01h 47mMITRE ATT&CK Fundamentals
58mMITRE ATT&CK for Developers
48mMITRE ATT&CK: The Play at Home Edition
30mThe SOC Counter ATT&CK
36mBeing A Better Defender By Channeling Your Worst Adversary:
40mMITRE ATT&CK® as a Framework for Cloud Threat Investigation
31mDon't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity
38mSightings Ecosystem: A Data-driven Analysis of ATT&CK in the Wild