This room will discuss the various resources MITRE has made available for the cybersecurity community.
ATT&CK® Framework
- Besides Blue teamers, who else will use the ATT&CK Matrix? (Red Teamers, Purpe Teamers, SOC Managers?)
Answer: Red Teamers
It was clearly stated in the room that Red Teamers can also use the ATT&CK Matrix.
2. What is the ID for this technique?
Answer: TI566
From the Mitre website, under the Initial access section, I found the phishing tab with ID T1566
3. Based on this technique, what mitigation covers identifying social engineering techniques?
Answer: User Training
Press enter or click to view image in full size
From the MITRE website, I clicked on the Technique (Phishing) from the previous question and scrolled down to find the mitigation that has to do with Social Engineering. It is User Training.
4. What are the data sources for Detection? (format: source1,source2,source3 with no spaces after commas)