Summary
Keywords
Full Transcript
If you want to stop your security operations career becoming a nightmare, you MUST Learn how to operationalize MITRE, how to use ATT&CK Navigator and how can you utilize them in a smart way which can save your time plus do the job. Threat Intelligence gathering is a MUST skill now in security operations to increase the value of your Detection Strategy, Detection Usecases, Huntuning hypothesis etc. And it is very important to map all of the Threat Intelligence with MITRE TTPs so that you can act upon them on time and in proper manner. Probably you can go through 1, 2 such Intel manually and map the TTPs by your own, but what if there are 100s of such reports? You can't do it manually, isn't it? So, Today is Day-10 of my Free DFIR Course where we will explore another FOSS tool created by MITRE which can help you to map your Intel with their TTPs. Not only you can map them, but also you can export the report, put it in a excel, put it in a json and draw it on Attack Navigator! Another FOSS tool, you must know now! So I have tried to cover below stuffs- ✔ How to map MITRE TTPs automatically using MITRE TRAM ✔ How to install TRAM, make it operationalize ✔ How to use Attack Navigator properly ✔ How to use both TRAM + Navigator to operationalize MITRE Framework ✔ How to install Attack Navigator Locally inhouse So, please watch the full video if you want to save your SOC career today but if you are interested in any particular topic, feel free to use the timeline below to navigate! 🔗LINKS FOR YOUR REQUIREMENTS- ------------------------------------------------------------------------------------------------------------------------- 1. TRAM Repo- https://github.com/mitre-attack/tram 2. Attack Navigator Repo- https://github.com/mitre-attack/attack-navigator 3. Punkt Repo- https://github.com/nltk/nltk_data/tree/gh-pages/packages/tokenizers 4. Attack Navigator Live- https://mitre-attack.github.io/attack-navigator/ 5. TRAM Installation Steps- https://github.com/archanchoudhury/DFIR-Tools/blob/main/Blue%20Team%20Tools/Tram%20Installation%20Steps.txt 6. Att&ck Navigator Installation Steps- https://github.com/archanchoudhury/DFIR-Tools/blob/main/Blue%20Team%20Tools/Attack-Navigator-Installation%20Steps.txt ------------------------------------------------------------------------------------------------------------------------- 📝 Check out Incident Response Full Training Course👉 https://bit.ly/2OKQaFP WATCH BELOW AS WELL, if you want to make your career in DFIR and Security Operations!! ------------------------------------------------------------------------------------------------------------------------- INCIDENT RESPONSE TRAINING Full Course 👉https://youtube.com/playlist?list=PLjWEV7pmvSa4yvhzNsCjOJovOn1LLyBXB DFIR Free Tools and Techniques 👉 https://youtube.com/playlist?list=PLjWEV7pmvSa6f-NTpXsaUYWZLjLAB_0TS Windows and Memory Forensics 👉 https://youtube.com/playlist?list=PLjWEV7pmvSa50erciZUSnzvE7nK0FyvsH Malware Analysis 👉 https://youtube.com/playlist?list=PLjWEV7pmvSa6u32RongesgDtkfKBfrFWW IR Flash 👉 https://youtu.be/6kOinwAB-BY Email Header Analysis 👉 https://youtu.be/qedIyy5KesQ ⌚ Timelines ------------------------------------------------------------------------------------------------------------------------- 0:00 ⏩ Intro 1:26 ⏩ Exploring TRAM 7:24 ⏩ Exploring Attack Navigator 12:48 ⏩ Install TRAM 24:20 ⏩ Install Attack Navigator 33:34 ⏩ Create Background Job 36:40 ⏩ Summarize 📞📲 FOLLOW ME EVERYWHERE- ------------------------------------------------------------------------------------------------------------------------- ✔ LinkedIn: https://www.linkedin.com/company/blackperl ✔ You can reach out to me personally in LinkedIn as well- https://bit.ly/38ze4L5 ✔ Twitter: @blackperl_dfir ✔ Git: https://github.com/archanchoudhury ✔ Insta: (blackperl_dfir)https://www.instagram.com/blackperl_dfir/ ✔ Can be reached via [email protected] SUPPORT BLACKPERL ------------------------------------------------------------------------------------------------------------------------- ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ ➡️ SUBSCRIBE, Share, Like, Comment ☕ Buy me a Coffee 👉 https://www.buymeacoffee.com/BlackPerl 📧 Sponsorship Inquiries: [email protected] ------------------------------------------------------------------------------------------------------------------------- 🙏 Thanks for watching!! Be CyberAware!! 🤞
