What ATT&CK is and why it’s useful for cyber threat intelligence (CTI)
How to map to ATT&CK from both finished reporting and raw data
Why it’s challenging to store ATT&CK-mapped data and what you should consider when doing that
How to perform CTI analysis using ATT&CK-mapped data
How to make defensive recommendations based on CTI analysis
The training contains five modules that consist of videos and exercises that are linked below. This training was designed to be completed in approximately 4 hours, and may be completed solo or as a team. We recommend you view the video for each module, and when prompted, pause the video to access the exercise documents linked below and complete the exercises, then proceed with viewing the video to go over the exercise.
