MITRE Engenuity ATT&CK results are out

Link: https://attackevals.mitre-engenuity.org/enterprise/participants?adversaries=wizard-spider-sandworm%2Ccarbanak-fin7%2Capt29%2Capt3

These came out in the last few weeks and I haven’t seen any discussion here about the results yet, so here we go.

If we look at Wizard Spider analytic coverage only, these are some of the results:

AhnLab: 59/90 substeps

BitDefender: 106/109 substeps


Checkpoint: 103/109 substeps

Cisco: 74/109 substeps

Crowdstrike: 94/109 substeps

MalwareBytes: 83/90 substeps

McAffee: 84/109 substeps

Broadcom: 87/109 substeps

ESET: 69/90 substeps


Why is the performance so variable for such a financially severe issue? According …

amp att ck cybersecurity mitre mitre engenuity