{"id":2752,"date":"2018-06-09T15:33:53","date_gmt":"2018-06-09T15:33:53","guid":{"rendered":"http:\/\/websecuritypatterns.com\/blogs\/?p=2752"},"modified":"2018-08-09T16:12:21","modified_gmt":"2018-08-09T16:12:21","slug":"attck-navigator-for-studying-adversary-tactics","status":"publish","type":"post","link":"https:\/\/websecuritypatterns.com\/blogs\/2018\/06\/09\/attck-navigator-for-studying-adversary-tactics\/","title":{"rendered":"ATT&CK Navigator: Studying Cyberthreat intelligence from adversary tactics and exploits"},"content":{"rendered":"

Since inception, I had been following MITRE’s ATT&CK Navigator knowledge base for studying (threat modeling) pre and post-exploit techniques on Web, Mobile and Enterprise applications more particularly running on Windows and Linux systems. Indeed, it is a great resource for understanding the devil in the details of attack techniques and simulate it from simple hacking credentials from the initial access to exfiltration and till command & control. You can study and understand how adversaries launch and execute attacks and evolve a defense strategy based on the threats we potentially face.<\/p>\n

MITRE announced the version 2 of the ATT&CK Navigator last week (l believe last week of May 2018).<\/p>\n

\"\"

MITRE Enterprise ATT&CK Framework for Cyber Threat Intelligence<\/p><\/div>\n

To try and review each layer and define your custom attack matrix, you can interactively create layers within the Navigator or programmatically and then visualized via the Navigator.<\/p>\n

For accessing Navigator from your browser:<\/p>\n

https:\/\/mitre.github.io\/attack-navigator\/enterprise\/<\/p>\n

For accessing Navigator using Mobile:<\/p>\n

https:\/\/mitre.github.io\/attack-navigator\/mobile\/<\/p>\n

Check out these URLs of ATT&CK Matrix for Linux<\/a>, Windows<\/a>, Mac<\/a>….Will post more details on how to simulate an attack… soon.<\/p>\n","protected":false},"excerpt":{"rendered":"

Since inception, I had been following MITRE’s ATT&CK Navigator knowledge base for studying (threat modeling) pre and post-exploit techniques on Web, Mobile and Enterprise applications more particularly running on Windows and Linux systems. Indeed, it is a great resource for understanding the devil in the details of attack techniques and simulate it from simple hacking credentials from the initial access… Read more »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[15,85,5,21,9,86,84],"tags":[113,111,112],"class_list":["post-2752","post","type-post","status-publish","format-standard","hentry","category-cloud-security","category-dosddos","category-identity-management","category-java-security","category-security","category-threat-profiling","category-web-security","tag-attck","tag-threat-modeling","tag-web-security"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/posts\/2752","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/comments?post=2752"}],"version-history":[{"count":3,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/posts\/2752\/revisions"}],"predecessor-version":[{"id":2759,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/posts\/2752\/revisions\/2759"}],"wp:attachment":[{"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/media?parent=2752"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/categories?post=2752"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/tags?post=2752"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}