|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/mitre-attck-live-framework/
课程评论：没有评论
**课程名称：** MITRE ATT&CK 实战框架 **课程概述：** 本课程深入介绍了 MITRE ATT&CK 框架，这是一个由 MITRE 公司于 2013 年发布的、用于分类和描述网络攻击与入侵的宝贵指南。该框架将攻击者的“技术目标”划分为 14 个战术类别。 MITRE ATT&CK 框架主要依赖于公开可用的威胁情报、事件报告以及网络安全分析师和威胁猎手的研究成果，这些研究不断贡献新的技术。网络安全专业人员利用此框架来更深入地理解攻击者可能采用的各种行动方式，从而更有效地检测和阻止对抗性行为。 不同的攻击者倾向于使用特定的技术。“MITRE ATT&CK 框架”汇总了将攻击者群体与其攻击活动相关联的信息，帮助安全团队更好地了解他们所面对的对手，评估自身防御能力，并针对最关键的领域加强安全措施。 **核心概念：** * **战术 (Tactics)：** 指的是攻击者试图达成的特定技术目标，例如横向移动、规避防御或数据窃取。战术根据这些目标进行分类，目前企业矩阵包含 14 种战术。 * **技术 (Techniques)：** 描述了攻击者为实现某个目标可能采用的一种具体方法。每个“战术”类别下都记录了大量“技术”，这是因为攻击者可能根据其技能、目标系统的配置以及可用工具的不同，采用各种技术。 **技术详情：** 每项技术都包含以下内容： * 方法的描述 * 适用的系统和平台 * 使用该技术的已知攻击者群体（如果已知） * 缓解该活动的方法 * 现实世界中该技术使用的参考资料 **课程价值：** 本课程旨在赋能学员充分理解和运用 MITRE ATT&CK 框架，以提升网络安全防护能力，更好地识别、分析和应对各种网络威胁。
The Adversarial Tactics, Techniques, and Common Knowledge or MITRE ATT & CK is a guideline for classifying and describing cyberattacks and intrusions. It was created by the Mitre Corporation and released in 2013. The framework consists of 14 tactics categories consisting of "technical objectives" of an adversary.MITRE's ATT & CK is populated mainly by publicly available threat intelligence and incident reporting, as well as by research on new techniques contributed by cyber security analysts and threat hunters. It is used by those same professionals to better understand the different ways bad actors might operate so adversarial behavior can be detected and stopped.Specific adversaries tend to use specific techniques. The MITRE ATT & CK Framework catalogs information that correlates adversary groups to campaigns, so security teams can better understand the adversaries they are dealing with, evaluate their defenses, and strengthen security where it matters most.Adversarial tactics are specific technical objectives that an adversary intends to achieve, such as lateral movement, defense evasion, or exfiltration. Tactics are categorized according to these objectives. For instance, there are currently 14 tactics cataloged in the enterprise matrix.A technique describes one specific way an adversary may try to achieve an objective. A multitude of techniques are documented under each "tactics" category. This is because adversaries may use different techniques depending on factors such as their skills sets, targets' system configuration aned availability of suitable tools.Each technique includes a description of the method, the systems and platforms it pertains to, which adversary groups use it (if that is known), ways to mitigate the activity, and references to its use in the real world.
