Threat Detection and Response in the Context of MITRE ATT&CK Framework
QSC USA 2020 – Travis Smith, Director, Malware Threat Research, Qualys
The MITRE ATT&CK framework gives defenders an advantage by letting them know how attackers target their systems. In this session, we'll look at how the Qualys Cloud Platform lets you respond quickly and intelligently to attackers and shorten the time attackers lurk in your environment. We'll explore how Qualys Policy Compliance helps you lock down assets under the context of the ATT&CK framework. In instances where attackers bypass the hardened state of the system, we'll show you how Qualys File Integrity Monitoring and Qualys EDR provide enhanced capabilities to detect tactics, techniques and procedures linked back to the ATT&CK framework.