MITRE ATT&CK Framework

MITRE ATT&CK

The adversarial tactics, techniques, and common knowledge (MITRE ATT&CK) is a guideline for classifying and describing cyberattacks and intrusions. Created by the MITRE Corporation, the framework consists of 14 tactical categories that represent the “technical objectives” of an adversary. 

The MITRE ATT&CK framework provides guidance on how best to prevent and respond to cyberthreats, and is essential for understanding, prioritizing, and mitigating cyberattack risks. It can help strengthen cyberthreat intelligence, improve alert triage and investigations, create realistic scenarios and emulation plans for red team exercises, and implement strong mitigation controls. 

Ridge Security ACE support for MITRE ATT&CK: Its Adversary Cyber Emulation (ACE) prevents cyberattacks by preempting adversarial opportunities by bad actors. ACE includes complete coverage of the MITRE ATT&CK Framework, applies AI-driven decision making, is modeled with a collective knowledge of threats, vulnerabilities, and exploits, and is equipped with state-of-the-art ethical hacking techniques. 

To measure security control effectiveness, Ridge Security’s ACE software agents simulate real-world cyberattacks without impacting the organization’s IT environment, using an Assessment Test Script (scripted behaviors to simulate a specific cyberattack or confirm security controls) and Key Measurement Block Rate (the ratio of blocked scripts versus all assessment scripts executed). Additional capabilities include Endpoint Security simulation, Data Exfiltration simulation, and Active Directory Information Recon.