ATT&CK Essentials for Security Analysts

Respond faster with ATT&CK

Whether you’re just getting started with MITRE ATT&CK™ or sharpening your existing knowledge, we’ve got your back. Learn how Red Canary maps threat detections to ATT&CK to help you understand—and stay ahead of—adversaries.

To get started, explore the videos and articles below or schedule a team call with our experts.

SEE RED CANARY AND ATT&CK IN ACTION

Red Canary analyzes endpoint activity and investigates threats with 99.999% accuracy.

See how confirmed threat reports map to ATT&CK to deliver the context you need to take quick action.

POPULAR WITH SECURITY ANALYSTS

Diary of a Detection Engineer: Babysitting child processes

What is normal? Profiling System32 binaries to detect DLL Search Order Hijacking

Tales from decrypt: Differentiating decryptors from ransomware

Rclone Wars: Transferring leverage in a ransomware attack

Does signed mean trusted? The Mimikatz dilemma

Respond and remediate faster with Red Canary’s new Splunk Phantom integration

WORKING TOGETHER FOR BETTER

The fact that Red Canary’s researchers are investigating new threats makes me feel so comfortable. They are on top of the latest threats and discovering new techniques and tactics.”

VP, Threat Management

We're in the fight with you.

Partnering with Red Canary means adding a team of seasoned security experts to your lineup. You’ll work side by side with battle-tested security veterans who have been in your shoes, and who are uniquely positioned to understand the challenges you’re facing.

This is not a 9-to-5 endeavor. It’s a 24/7/365 commitment. Improving security is not only our job, it’s our hobby and our mission.