all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
all InfoSec news

Mitre deTTECT

Add to bookmarks
March 30, 2023, 8:01 a.m. | /u/hdhshajddn

For [Blue|Purple] Teams in Cyber Defence www.reddit.com

Hi guys, I have a list of priority TTPs and am trying to prioritize which data sources should be ingested into a SIEM according to these TTPs. Does anyone have a guide or tips on using deTTECT tool to pull this information out?

blueteamsec data data sources guide information list mitre siem tips tool ttps

Visit resource

More from www.reddit.com / For [Blue|Purple] Teams in Cyber Defence

Uncovering an undetected KeyPlug implant attacking industries in Italy 3 hours ago | www.reddit.com
blueteamsec implant industries italy +2
Master of Puppets: Uncovering the DoppelGänger pro-Russian influence campaign 3 hours ago | www.reddit.com
blueteamsec campaign influence master +2
Custom Detection Rules for PowerShell (W/ Script Block Logging Enabled). Is it even worth it? 14 hours ago | www.reddit.com
block blueteamsec capture command +21
Spring Cleaning with LATRODECTUS: A Potential Replacement for ICEDID — Elastic Security Labs 1 day, 2 hours ago | www.reddit.com
blueteamsec cleaning elastic elastic security +6
Hunting Black Basta’s Cobalt Strike - dominant watermarks observed within Black Basta infrastructure were 1357776117 … 2 days, 3 hours ago | www.reddit.com
basta black basta blueteamsec cobalt +5
Detecting the STRRAT Malware Family 2 days, 3 hours ago | www.reddit.com
blueteamsec family malware strrat
Threat Detection Engineering and Incident Response with AuditD and Sentinel along how to understand and … 2 days, 9 hours ago | www.reddit.com
article auditd blueteamsec build +13
Empowering enterprise security at scale with new product innovations: YubiKey 5.7 and Yubico Authenticator 7 3 days, 2 hours ago | www.reddit.com
authenticator blueteamsec enterprise enterprise security +6
How To: Use UFW(Uncomplicated Firewall) and Send the logs to Sentinel and Parse with a … 3 days, 5 hours ago | www.reddit.com
blueteamsec check connections easy +8

Jobs in InfoSec / Cybersecurity

Post a Job Search Talent

Sr. Product Manager

@ MixMode | Remote, US
View on infosec-jobs.com

Information Security Engineers

@ D. E. Shaw Research | New York City
View on infosec-jobs.com

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada
View on infosec-jobs.com

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA
View on infosec-jobs.com

Incident Response Lead(IR)

@ Blue Yonder | Hyderabad
View on infosec-jobs.com

Comcast Cybersecurity: Privacy Operations Executive Director

@ Comcast | PA - Philadelphia, 1701 John F Kennedy Blvd
View on infosec-jobs.com