by m93718 | Aug 23, 2021
intro Unsolicited Response Engenuity Site ATT&CK Evaluations Expands to Industrial Control Systems ...
by m93718 | Aug 23, 2021
Data sources are an integral part of an organizational detection and forensic analysis strategy. Detecting an adversary requires collecting the artifacts or telemetry that capture adversary behavior for analysis. Collecting this data within a Security Information and...
by m93718 | Aug 23, 2021
Threat Hunting is a proactive way to identify malicious activity and security gaps in an environment. What follows is a high-level overview of Threat Hunting, with some OT discussion points to have internally when Threat Hunting in an OT environment. As part of a...
by m93718 | Aug 23, 2021
The security controls used in IT environments often cannot be applied to OT. While activities such as patching, anti-virus definition updates and configuration control are commonplace in an IT environment, this is not the case in an OT environment. The OT environments...
by m93718 | Aug 23, 2021
ATT&CK for ICS is a knowledge base useful for describing the actions an adversary may take while operating within an ICS network. The knowledge base can be used to better characterize and describe post-compromise adversary behavior. Please see the overview page...
