MITRE ATT&CK is becoming the industry standard for describing adversary behaviors and improving defenses, but many organizations who want to use it don’t know where to start. This session will bring together new and experienced ATT&CK users to share best practices so participants can leave with actionable insights they can apply to their own ATT&CK use cases.
Learning Objectives: 1: Learn how others use ATT&CK for cyber-defense, threat intelligence, red teaming and other use cases. 2: Understand the best practices other participants consider to make ATT&CK applicable. 3: Prepare for potential challenges with ATT&CK by sharing limitations and pitfalls.