https://DevOpsCloud.io -- Cloud Monk Losang Jinpa

Return to CEH

“MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community. Further details on the MITRE ATT&CK framework can be found at https://attack.mitre.org

“Our red team operations tooling courses map to the MITRE ATT&CK matrix tactics, techniques, and procedures. Each course focuses on the use of a specific industry-standard, generally open source, tool to carry out adversary emulation. Knowing what a tool is and how it can perform a specific task, will ultimately lend to your ability as an organization or an individual to detect and defend against specific attack vectors.”

The PRE-ATT&CK section outlines tools used to achieve the following outcomes:

• Technical Information Gathering
• Technical Weakness Identification
• Build Capabilities

The ATT&CK section outlines tools used to achieve the following outcomes:

• Initial Access
• Execution
• Persistence
• Privilege Escalation
• Defense Evasion
• Credential Access
• Discovery
• Lateral Movement
• Collection
• Command and Control
• Exfiltration
• Impact

• Security Testing
• Security Architecture
• Security Engineering
• Network Security
• Security Assessment
• Security Operations
• Application Security
• Risk management

Fair Use Source: https://app.pluralsight.com/paths/skills/red-team-tools

• Kill Chain
  • Recon
  • Exploit
  • Escalate
  • Lateral Movement Action
  • Evade

• Hashcat is between the Exploit and the Escalate stages of the [Kill Chain

• Red Team Kill Chain
  • Red Team Recon
  • Red Team Exploit
  • Red Team Escalate
  • Red Team Lateral Movement Action
  • Red Team Evade

• MITRE ATT&CK Tactics:
  • Initial Access
  • Execution
  • Persistence
  • Privilege Escalation
  • Defense Evasion
  • Credential Access
  • Discovery
  • Lateral Movement
  • Collection
  • Command & Control
  • Exfiltration
  • Impact

• MITRE ATT&CK Tactics:
  • Red Team Initial Access
  • Red Team Execution
  • Red Team Persistence
  • Red Team Privilege Escalation
  • Red Team Defense Evasion
  • Red Team Credential Access
  • Red Team Discovery
  • Red Team Lateral Movement
  • Red Team Collection
  • Red Team Command & Control
  • Red Team Exfiltration
  • Red Team Impact