CarbonBlack & ATT&CK

[james mckinlay 116]

if the title is your thing you might like this work

 

https://github.com/0xpwntester/CB-Threat-Hunting/tree/master/ATT%26CK

 

 

[Jack Whitter-Jones 0]

That is cool, I would be really interested to see a pick up of interest to map tooling to the MITRE attack framework

Edited July 26, 2019 by Jack Whitter-Jones

[james mckinlay 116]

@Ali Hussein, remember this ?

[Ali Hussein 7]

Thanks @james mckinlay. I posted this to CarbonBlack forums and they said they will merge the ones I created to the threat intel feed they push to customers. once done with CBR I will move to map MITRE to sysmon and windows event logs probably by Jan