What is ATT&CK Coverage, Anyway? | Adam Mashinchi | WWHF San Diego 2022
Reviews what is ATT&CK Coverage, Anyway? | Adam Mashinchi | WWHF San Diego 2022 and evaluates key implications for security practitioners.
Summary
Overview: Adam Mashinchi presents at Wild West Hackin' Fest on ATT&CK coverage, completing a trilogy of talks exploring what coverage means and how organizations measure defensive effectiveness.
Key Topics: Defining ATT&CK coverage beyond checkbox compliance; building coverage measurement programs; prior talks at Wild West Hackin' Fest and ATT&CKcon; and practical guidance for spinning up coverage initiatives.
Technical Details: Mashinchi wraps up a three-talk series on ATT&CK coverage, providing updated guidance on measuring which techniques organizations can detect and respond to, moving beyond simply mapping controls to the framework.
Takeaways: ATT&CK coverage requires meaningful measurement of detection and response capability, not just control mapping. Organizations should build programs that validate actual defensive effectiveness.
Related talks
Wild West Hackin' Fest - Way West·37 min
Analyzes data is the New Oil | Jeremiah Fowler | WWHF San Diego 2022 and evaluates key implications for security practitioners.
Wild West Hackin' Fest - Way West·51 min
Outlines making the Case for SCA | Alyssa Miller | WWHF San Diego 2022 and evaluates key implications for security practitioners.
Wild West Hackin' Fest - Way West·1 hr 4 min
Demonstrates security Isnt What You Do! | Doc Blackburn | WWHF San Diego 2022 and evaluates key implications for security practitioners.