Wednesday, September 24, 2025
12:15 PM - 4:30 PM (EDT)
Worcester, MA - Public Sector Workshop: Educational Challenge: Threat Hunting using MITRE ATT&CK™ TTPs to Identify Adversarial Behaviors (PM Session)

When: Wednesday September 24, 2025
Where: 
AC Hotel Worcester
Address: 125 Front St, Worcester, MA 01608

 

Workshop Description: 

In this workshop, participants learn how to use Fortinet analytics products to hunt for threats using TTPs by assuming the role of a security analyst. Attendees will be asked to identify any undetected threats on the network making use of the MITRE ATT&CK™ framework.

The challenge is set up with several exercises set around the technical goals the adversary is trying to achieve (ATT&CK™ Tactics), for example, Initial Access, Persistence, Privilege Escalation, Command and Control. Participants will be asked to detect any techniques being used by an adversary to achieve these goals.

The challenge is set up with several exercises set around the technical goals the adversary is trying to achieve (ATT&CK™ Tactics), for example, Initial Access, Persistence, Privilege Escalation, Command and Control. Participants will be asked to detect any techniques being used by an adversary to achieve these goals.

Participants who attend this workshop will learn how to:

  • Determine what is the MITRE ATT&CK framework and how it can be used
  • Determine what are the TTPs that threat actors use to carry out a breach
  • Use FortiEDR Threat Hunting capabilities to uncover threats on the network
  • Use FortiSIEM analytics to discovery attacker behavior based on attack techniques
  • Use FortiDecepter to find attacker activity and shorten attacker dwell time

 

Agenda:

8:30am - 9:00am - Check in & Light Breakfast

9:00am - 12:00pm - AM Session: What's New in FortiOS?

12:15pm - 12:45pm - Lunch 

1:00pm - 4:30pm - PM Session: Educational Challenge: Threat Hunting using MITRE ATT&CK™ TTPs to Identify Adversarial Behaviors

 

Reminder: Please bring a laptop to participate in this Fast Track

Please Note: Participation in this session is limited to individuals representing current or potential public sector customers.