Advance your Microsoft Defender ATP hunting skills using the Atomic execution framework

Fri, 05 Jun 2020 12:38:56 +0000

Hello everyone, during the past months I took a closer look at MITRE ATT&CK to advance my hunting skills using Microsoft Defender Advanced Threat Protection. For those not familiar with MITRE ATT&CK, in short, it is a knowledge base knowledge base of adversary tactics and techniques based on real-world observations.

To familiarize myself with MITRE ATT&CK, I first started reading through all the tactics and techniques, to be honest while reading, I often couldn’t resists to get my hands on the keyboard and try things out, but I kept discipline and completed studying all the content first.

Mitreattack on Anything About IT

Advance your Microsoft Defender ATP hunting skills using the Atomic execution framework