ATT&CK Essentials for Security Analysts

Respond faster with ATT&CK

Whether you’re just getting started with MITRE ATT&CK™ or sharpening your existing knowledge, we’ve got your back. Learn how Red Canary maps threat detections to ATT&CK to help you understand—and stay ahead of—adversaries.

To get started, explore the videos and articles below or schedule a team call with our experts.

SEE RED CANARY AND ATT&CK IN ACTION

Red Canary analyzes endpoint activity and investigates threats with 99.999% accuracy.

See how confirmed threat reports map to ATT&CK to deliver the context you need to take quick action.

POPULAR WITH SECURITY ANALYSTS

Detecting SharePoint attacks via worker process activity

Exploring the phases of incident response: visibility, containment, & response

How to Use the ATT&CK Framework to Mature Your Threat Hunting Program

ATT&CK™ Is Only as Good as Its Implementation: Avoiding Five Common Pitfalls

Behind the Scenes with Red Canary’s Detection Engineering Team

Lateral Movement Using WinRM and WMI

WORKING TOGETHER FOR BETTER

The fact that Red Canary’s researchers are investigating new threats makes me feel so comfortable. They are on top of the latest threats and discovering new techniques and tactics.”

VP, Threat Management

We're in the fight with you.

Partnering with Red Canary means adding a team of seasoned security experts to your lineup. You’ll work side by side with battle-tested security veterans who have been in your shoes, and who are uniquely positioned to understand the challenges you’re facing.

This is not a 9-to-5 endeavor. It’s a 24/7/365 commitment. Improving security is not only our job, it’s our hobby and our mission.

ATT&CK ESSENTIALS