Finding Cyber Threats with ATT&CK-Based Analytics

This paper presents a methodology for using the MITRE ATT&CK framework, a behavioral-based threat model, to identify relevant defensive sensors and build, test, and refine Behavioral-based analytic detection capabilities using adversary emulation.