Jason Holcomb - ATT&CK Yourself: Using Discrete Adversary TTPs... - BSides Springfield 2017
Channel: Security BSides Springfield
Date: 2018-02-05

Security BSides Springfield, 2017 (Drury University, Springfield, MO)- Talk 1.6 - Jason Holcomb (@icssec) - ATT&CK Yourself: Using Discrete Adversary TTPs to Make Your Network and Systems More Defendable.  

Download this video at https://drive.google.com/open?id=1P9yY_4qZtv9M3pXwyLsMp3w8Uzd5hMLL HD and a much smaller 480p file at https://drive.google.com/open?id=1sBvK_9ob27p7N01DlSze0AIJ4oQ_cZFr

The audio from this talk is availble to stream or download as a podcast at https://soundcloud.com/securitybsides/jason-holcomb-attck-yourself-using-discrete-adversary-ttps-systems

Link to slides, download video and podcast versions of all other BSides Springfield talks are going up at:  https://drive.google.com/open?id=0BxWhKP-qMw2kTFptSy1SeXF6VmM

Music featured at the end and begining "Over your cities grass will grow" by Ötone (Pablo Diserens), from the label YGAM @ygam Used with permission from YGAM and the artist.  Learn more about the artists and download the songs for free at
soundcloud.com/ygam/sets/otone-past-structures-present-matter-ep-ygm003-1 or at https://ygam.bandcamp.com/album/past-structures-present-matter .

Official Links:
@BSidesSpfd www.securitybsides.com/w/page/116970567/BSidesSpfd

VOC angels:
@ablythe twitter.com/ablythe
@cherokeejb_ twitter.com/cherokeejb_
Follow cherokeejb.blogspot.com/ for more video and audio from Springfield, as well as upcoming dfir, security operations, and forensics posts.

other volunteers included (thanks!)
Beth Young
Shannon McMurtrey
Lorne Hazlewood
Steve McIntosh
Matt Stephenson
Ryan Halstead

Sponsors (also, a big thanks!)
with special thanks to augustalocksports.org/
* @pickaugusta
*Jack Henry & Associates, Inc.
* Drury University
* Revolutionary Seurity
* Forcepoint by Raytheon
* O'Reilly Media
*Splunk
*Motta Network Experts, Inc.
*No Starch Press
*IBM

Other presenters:
@ablythe
@amaughan
@c2thewinkler
@securithid
@sysopfb
@motta_mike mnex.biz
@westongeorge
@sysopfb

-

From the presenter:
Penetration testing and vulnerability assessment have their place but could there be a security testing technique that provides greater value? In this presentation, we will introduce and explore MITRE’s ATT&CK framework in the context of building discrete test cases around specific attacker Tactics, Techniques, and Procedures (TTP). We will then look at how this type of testing can provide valuable insight into weaknesses in your current defensive posture from monitoring and detection to blocking and response.