This talk will discuss the process of building an adversarial playbook using the MITRE ATT&CK framework, off years of experience through FortiGuard Labs. By understanding the TTPs (techniques, tactics, procedures) – the way attackers move, a better defensive (blue team) playbook can be built to mitigate the threat. What this talk will examine is taking this one step further, to light up campaigns tactics using real time data of popular techniques (sightings) to help CxO’s prioritize their blue team playbooks. *

* Доступен синхронный перевод