Week 2: Cyber Kill Chain & Threat Intel

Session Goal

Understand adversary TTPs (Tactics, Techniques, and Procedures) to better anticipate and counter their moves.

Concepts

• Lockheed Martin Cyber Kill Chain®.

• MITRE ATT&CK® Framework.

• Cyber Threat Intelligence (CTI).

• Indicators of Compromise (IOCs) vs. Indicators of Attack (IOAs).

Lab: Navigating the MITRE ATT&CK® Framework

Objective: Use the ATT&CK Framework as a practical tool for threat analysis.

Tasks:

• Explore the Matrix.

• Research a Threat Group.

• Map a Technique to a Defense.

• Discuss a detection scenario.

Requirements: Web browser with internet access.