Blair Aligning Security Operations with the MITRE ATT&CK Framework

Level up your security operations center for better security
1. Auflage 2023
ISBN: 978-1-80461-669-7
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 192 Seiten

No detailed description available for "Aligning Security Operations with the MITRE ATT&CK Framework".

Autoren/Hrsg.

Blair, Rebecca

Fachgebiete

• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Mathematik | Informatik EDV | Informatik Betriebssysteme

Inhaltsverzeichnis

Table of Contents - SOC Basics – Structure, Personnel, Coverage, and Tools
- Analyzing Your Environment for Potential Pitfalls
- Reviewing Different Threat Models
- What is the ATT&CK Framework?
- A Deep Dive into the ATT&CK Framework
- Strategies to Map to ATT&CK
- Common Mistakes with Implementation

- Return on Investment Detections
- What Happens After an Alert is Triggered?
- Validating Any Mappings and Detections
- Implementing ATT&CK in All Parts of Your SOC
- What's Next? Areas for Innovation in Your SOC

Über Autor(innen)

Blair Rebecca:

Rebecca Blair currently serves as the SOC Manager at a Boston-based tech company, where she is in the process of building out a SOC team to include analyst workflows, playbooks, and processes. Also, she served at IronNet as the Director of SOC Operations, at Tenable Inc as a Test Engineer, and at the Army Research Lab as a Technical Compliance Lead, among other things. She has deep expertise in technology integrations and security operations and holds a BS degree from Norwich University in Computer Security and Information Assurance, an MS degree from the University of Maryland Global Campus in Cybersecurity and an MBA from Villanova University. She has found a niche in building SOC environments and maturing them in fast-paced environments.