[Breakout #2] Translating TTPs into Actionable Countermeasures | All-Around Defenders

[Breakout #2] Translating TTPs into Actionable Countermeasures | All-Around Defenders

Channel:
United States SANS Cyber Defense
Subscribers:
23,600
Published on ● Video Link: https://www.youtube.com/watch?v=j8Qi7J7IS2E


Duration: 56:17
3,657 views
44

Speakers: Ismael Valenzuela (McAfee/SANS) and Vicente Diaz (Threat Intel Strategist at Virustotal)

What are the best practices to make TTPs actionable? How can blue team defenders translate TTPs into practical actions to protect their organizations?

In this breakout, you’ll learn how to select interesting technical details that can be found in TTPs and playbooks, and how to use them to pivot and use similarity to get a better understanding of the campaign, find what is relevant of the technical details we obtained to understand how useful they will be for characterizing an attacker.
--

The All-Around Defender: New Year, New Start is not a summit nor is it a webcast. This event is a special community gathering of individuals who care about you, your family, your friends, and your career. We are holding this event to give away knowledge that will hopefully:

- Help defenders in their life and professional goals for 2021
- Giveaways that bring fellow blue teamers joy

Join our SANS Blue Team Community on Discord: https://discord.gg/ZvgwPtuusE

#AllAroundDefenders #SANSBlueTeam #BlueTeam #BlueTeamers #CyberDefense #CyberDefenders #SANSInstitute



Other Videos By SANS Cyber Defense


2021-03-31Hash or It Didn't Happen
2021-03-30Basic Persistent Threat (Monitoring)
2021-03-29Open-Source Intelligence Plus Blue Team | Live Stream Series
2021-03-29OSINT Efficiency: Extending & Building Tools - Keynote
2021-02-25Decrypt all the Things: TLS 1.3's impact on network security | Eric Conrad
2021-02-24Applying Machine Learning to Network Anomalies | Part 2
2021-02-17Applying Machine Learning to Network Anomalies | Part 1
2021-02-04Life is a Bit Easier with What2Log.com | Mick Douglas & Flynn Weeks
2021-01-24#BlueTeamFit and Healthy Habits | All-Around Defenders
2021-01-24Touring The Farm w Justin Henderson | All-Around Defenders
2021-01-24[Breakout #2] Translating TTPs into Actionable Countermeasures | All-Around Defenders
2021-01-24[Roundtable #2] Balancing Career & Life - Achieving Career Success | All-Around Defenders
2021-01-24[Lifestyle Discussion #1] Brewing The Perfect Cup of Coffee | All-Around Defenders
2021-01-24Breaking the Destructive Cycle of Stress | All-Around Defenders
2021-01-24[Breakout #1] Better Alerts via Log Enrichment | All-Around Defenders
2021-01-24[Roundtable] Cyber Defense Predictions: What Are We Going To See in 2021? | All-Around Defenders
2021-01-24[Introduction] All-Around Defenders: New Year, New Start | A Community Gathering
2021-01-13All About OSINT: Looking Forward, Looking Back
2020-12-12Building the Better Playbook: Techniques to Improve Repeatability | SANS Cyber Defense Forum 2020
2020-12-11Ask Us (Almost) Anything About Cyber Defense | SANS Cyber Defense Forum 2020
2020-12-10Resource Smart Detection with YARA and osquery