20210204 -
引言
去年大概也是这个时候,关注过这部分的内容。虽然之前也看到过很多大公司在招聘时有这方面的需求。威胁情报比较容易理解,att&ck就不是很理解了。毕竟没有做过真实的应急响应以及相关的分析。
这里就简单把之前的阅读文章留下来。
ATT&CK
- Using ATT&CK to Advance Cyber Threat Intelligence — Part 1
- Using ATT&CK to Advance Cyber Threat Intelligence — Part 2
- Getting Started with ATT&CK: Adversary Emulation and Red Teaming
- Getting Started with ATT&CK: Assessments and Engineering
- Visualizing ATT&CK - MITRE ATT&CK® - Medium
- ATT&CK 101 - MITRE ATT&CK® - Medium
- Introduction MITRE ATT&CK Framework (Part 1) — English
- Cyber kill chain and Mitre ATT&CK - Win Stark - Medium
- GitHub - nshalabi/ATTACK-Tools: Utilities for MITRE™ ATT&CK