Reimagining the MITRE ATT&CK F...
summary
Prisma Cloud unveils an interactive Attack Explorer that maps the MITRE ATT&CK framework to 12 cloud-native categories, showing a live demo where an obfuscated file (/evil) triggers an audit event, forensic timeline and a behavioral anomaly alert without custom rules. The dashboard auto-builds runtime baselines across hosts, containers, Kubernetes and serverless, surfaces a downloaded kubectl binary, exposes the exact rule fired, supports whitelist/blacklist tuning and RBAC, and exports detections to logs or automated actions.
AI-written summary · about
chapters (3)
related talks
48mMITRE ATT&CK: The Play at Home Edition
58mMITRE ATT&CK for Developers
31mDon't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting Activity
01h 47mMITRE ATT&CK Fundamentals
40mMITRE ATT&CK® as a Framework for Cloud Threat Investigation
38mAdversary Detection Pipelines: Finally Making Your Threat Intel Useful
21mUnderstanding the Latest Mitre Att&Ck Evaluation Data
49mFight Smarter: Accelerate Your SOC with AI Discovered Attacks