How to Mature Your Threat Hunting ProgramBest practices on using the ATT&CK framework to develop your threat hunting capabilities.
Every threat hunt starts with intelligence. As one of the industry's most comprehensive knowledge bases for adversary behavior, ATT&CK provides a structure for hunters to build their hypotheses and search for threats.
Hit play on the video above and learn how to use ATT&CK to:
- Increase the efficacy of your threat hunting program;
- Hunt for adversary tactics and techniques across the ATT&CK matrix;
- Develop a hypothesis and test it against known techniques;
- Obtain a broader set of evidence by hunting for adversarial techniques rather than specific signatures.