I completed the Splunk objective! holidayhackchallenge.com Don't miss out on SANS #HolidayHack x KringleCon

I completed the Holiday Hack Trail challenge! holidayhackchallenge.com Don't miss out on SANS #HolidayHack x KringleCon

I completed the Network Log Analysis: Determine Compromised System objective! holidayhackchallenge.com Don't miss out on SANS #HolidayHack x KringleCon

I completed the Get Access To The Steam Tunnels objective! holidayhackchallenge.com Don't miss out on SANS #HolidayHack x KringleCon

We’re excited to announce the initial release of ATT&CK for ICS! You can find the ICS knowledge base at attack.mitre.org/ics and a blog post by Otis Alexander explaining what’s new and different here: medium.com/mitre-attack/l…. Thank you to everyone who helped us get here!

Announcing the ATT&CKcon Power Hour! Instead of a 2 day conference, starting Oct 9 we'll be running a series of 90 minute virtual events! The CFP will be opening shortly for your talks on the most practical, aspirational, and things to always avoid with ATT&CK.

There’s a reason I can’t sleep anymore

New vulnerability disclosure on my blog! The Confused Mailman: Sending #SPF and #DMARC passing mail as any #Gmail or #GSuite customer ezh.es/blog/2020/08/t… #infosec

If you get hit with a rootkit, are you hopelessly pwned? Join ATT&CK lead Adam Pennington as he sits down with Red Canary and vmw_carbonblack tomorrow, 9/16, at 1pm ET to discuss several ways of performing T1014 and what you can do about them redcanary.com/resources/webi….

solarwinds.com/securityadviso…

Love control frameworks? Today, the @MITREengenuity Center for Threat Informed Defense released over 6,300 mappings between NIST 800-53 Rev. 4/5 and ATT&CK. You can read about their methodology and find links to the mappings in medium.com/mitre-engenuit….

Interested in adversary engagement & deception? This Friday (8/6) at 11am PDT, our MITRE friends will talk about the beta release of the successor to Shield, the MITRE Engage framework (engage.mitre.org). Check it out at the DEF CON PHV (forum.defcon.org/node/238552).

Grief ransomware group has ransomed the National Rifle Association (NRA).

The 2023 Red Canary Threat Detection Report is here! redcanary.com/threat-detecti… I'm very proud of our team for producing this report. Check it out, I hope you'll find actionable takeaways for your team!