Agenda

Using the MITRE ATT&CK framework and SIEM to:

  • 20 minutes

    Identify attacker's tactics, techniques and procedures (TTPs)

  • 10 minutes

    Detect sophisticated security threats

  • 15 minutes

    Investigate critical security incidents