{"id":19010,"date":"2022-05-11T08:00:40","date_gmt":"2022-05-11T16:00:40","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2022\/05\/11\/news-12743\/"},"modified":"2022-05-11T08:00:40","modified_gmt":"2022-05-11T16:00:40","slug":"news-12743","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2022\/05\/11\/news-12743\/","title":{"rendered":"Center for Threat-Informed Defense, Microsoft, and industry partners streamline MITRE ATT&CK\u00ae matrix evaluation for defenders"},"content":{"rendered":"

Credit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Wed, 11 May 2022 16:00:00 +0000<\/strong><\/p>\n

The MITRE Center for Threat-Informed Defense<\/a>, Microsoft, and other industry partners collaborated on a project<\/a> that created a repeatable methodology for developing a top MITRE ATT&CK\u00ae techniques list. The method aims to facilitate navigation of the ATT&CK framework<\/a>, which could help new defenders focus on critical techniques relevant to their organization\u2019s environment, and aid experienced defenders in prioritizing ATT&CK techniques according to their organization’s needs.<\/p>\n

The ATT&CK framework provides an extensive list of specific techniques that may be challenging to navigate in certain situations. This project aims to help defenders who use the framework focus on noteworthy techniques regardless of the attack scenario or environment. For example, using research on 22 ransomware attacks, the repeatable methodology led to the identification of the top 10 ransomware techniques list.<\/p>\n

The project also included the development of a customizable, web-based calculator<\/a> that seeks to prioritize techniques based on a defender\u2019s input, making the methodology even easier to apply to different environments and scenarios. As an example of the insights that can be gained from using this calculator, the project found that the following techniques are present in most attacks and environments:<\/p>\n