FedSearch - Federated network search engine

infosec-jobs.com · @infosec_jobs

1453 followers · 14571 posts · Server mastodon.social

HIRING: Cyber Security Expert / Paris, Germany https://infosec-jobs.com/J25097/ #InfoSec #InfoSecJobs #Cybersecurity #jobsearch #hiringnow #CyberCareers #Paris #Germany #AWS #CEH #CERT #Cloud #EDR #Firewalls #GIAC #IAM #Incidentresponse #MITREATTCK #Monitoring #OSCP #Pentesting

#infosec #infosecjobs #cybersecurity #jobsearch #hiringnow #cybercareers #paris #germany #aws #ceh #cert #cloud #edr #firewalls #giac #iam #incidentresponse #mitreattck #monitoring #oscp #pentesting

Last updated 3 years ago

Original post

infosec-jobs.com · @infosec_jobs

1450 followers · 14564 posts · Server mastodon.social

HIRING: Senior Security Analyst / New York City or Remote https://infosec-jobs.com/J24902/ #InfoSec #InfoSecJobs #Cybersecurity #jobsearch #hiringnow #CyberCareers #RemoteJob #Bash #Cloud #Forensics #GCIA #GCIH #Incidentresponse #Malware #MITREATTCK #Monitoring #PowerShell #SIEM

#infosec #infosecjobs #cybersecurity #jobsearch #hiringnow #cybercareers #remotejob #bash #cloud #forensics #GCIA #GCIH #incidentresponse #malware #mitreattck #monitoring #powershell #siem

Last updated 3 years ago

Original post

Ricky · @ricky

11 followers · 16 posts · Server infosec.exchange

Antisyphon - Getting Started in Security with BHIS and MITRE ATT&CK w/ John Strand - Antisyphon

Just signed up! Who else is taking this course?
https://www.antisyphontraining.com/getting-started-in-security-with-bhis-and-mitre-attck-w-john-strand/
#BHIS #mitreattck #infosec #redteam
@blackhillsinfosec @Antisy_Training

#BHIS #mitreattck #infosec #redteam

Last updated 3 years ago

Original post

Jasey DePriest (she / her) :donor: · @jrdepriest

75 followers · 746 posts · Server infosec.exchange

@fugueish Yes, but I think your CSIRP and related processes would need to reference MITRE ATT&CK and require it before it would be widely used.
It can get you started on mapping out any possible threat, risk, or attack you can think of and help you come up with mitigations. But if everybody isn't using it, you'll have references and language that only some teams understand.
In real life, it is nice when our security tools link to MITRE ATT&CK because we can quickly understand what a particular alert is about. But we don't put that on a report that goes to anybody else, because, as of right now, they would have no idea what T1548.002 means.

#mitre #mitreattack #mitreattck #csirp #csirt #infosec

Last updated 3 years ago

Original post

Melinda Marks · @melindamarks

33 followers · 7 posts · Server infosec.exchange

Great article here on how to best use the MITRE ATT@CK framework
#ciso #infosec #infosecurity #cybersecurity #mitreattck https://www.csoonline.com/article/3681990/the-changing-role-of-the-mitre-att-ck-framework.html

#ciso #infosec #infosecurity #cybersecurity #mitreattck

Last updated 3 years ago

Original post

Melinda Marks · @melindamarks

113 followers · 59 posts · Server infosec.exchange

Great article here on how to best use the MITRE ATT@CK framework
#ciso #infosec #infosecurity #cybersecurity #mitreattck https://www.csoonline.com/article/3681990/the-changing-role-of-the-mitre-att-ck-framework.html

#ciso #infosec #infosecurity #cybersecurity #mitreattck

Last updated 3 years ago

Original post

_Veronica_ · @verovaleros

345 followers · 122 posts · Server infosec.exchange

I like Mitre ATT&CK, but it feels too enterprise centric and often lacking behaviors usually tied to other scenarios such as home infections. These intrusions are not doing internal lateral movement, but scanning/attacking the internet. Somehow “network service discovery “ feels inappropriate for such behavior. #threatintel #mitreattck

#threatintel #mitreattck

Last updated 3 years ago

Original post

cygnetix :unverified: · @cygnetix

401 followers · 136 posts · Server infosec.exchange

Attack Flow has come a long way since I last looked at it. I'd love to see Red Teams start including Attack Flow diagrams as part of their report findings.

https://center-for-threat-informed-defense.github.io/attack-flow/example_flows/#list-of-examples

#mitreattck #redteamtips

Last updated 3 years ago

Original post

MJS :trans: · @MJS

40 followers · 62 posts · Server hachyderm.io

#infosec #lgbt #MITRE #mitreattck #ICS

#infosec #lgbt #mitre #mitreattck #ics

Last updated 3 years ago

Original post

· @postmodern

301 followers · 173 posts · Server infosec.exchange

Other than MITRE ATT&CK which is very broad and exhaustive, is there a attribute list for "capabilities" or "functionality" (or whatever you want to call them) that exploits or payloads grant the user? I'm looking for things like command-exec, file-read, file-write, etc.
#infosec #taxonomy #postexploitation #mitreattck

#infosec #taxonomy #postexploitation #mitreattck

Last updated 3 years ago

Original post

Puggmeister · @Puggmeister

11 followers · 5 posts · Server infosec.exchange

Jag har nyligen publicerat två delar av en serie på Medium om Atomic Red Team, Mitre ATT&CK och lite IT-forensiska verktyg. Tanken är att visa både på vilket sätt man kan använda Atomic Red Team, för att skapa en bättre förståelse för vad som händer på en klient vid ett potentiellt intrång, samt hur man med ganska enkla medel kan få fram artefakter och tekniska indikatorer vid en undersökning efter en attack-simulering.
Jag tar gärna emot feedback.
Här är del 1:
https://medium.com/@mathias_persson/it-forensisk-analys-atomic-red-team-mitre-att-ck-och-attack-simulering-del-1-d05b8ca7418c

Här är del 2:
https://medium.com/@mathias_persson/it-forensisk-analys-atomic-red-team-mitre-att-ck-och-attack-simulering-del-2-88687bfb4f90

#dfir #Atomicredteam #mitreattck

Last updated 3 years ago

Original post

Taylor Parizo · @taylorparizo

85 followers · 46 posts · Server infosec.exchange

The Hacker News - Threat hunting with MITRE ATT&CK and Wazuh

Great way of adding MITRE ATT&Ck analytics to your SIEM for threat hunting. They even added an intelligence component that resembles MITRE's Software/Groups tabs so your references are in one place.
#ThreatIntel #ThreatHunting #mitreattck

https://thehackernews.com/2022/11/threat-hunting-with-mitre-att-and-wazuh.html

#threatintel #threathunting #mitreattck

Last updated 3 years ago

Original post