MITRE ATT&CK Defender™ ATT&CK® Adversary Emulation

Cybrary
Course

Do you want to learn the exciting discipline of Adversary Emulation? In this MITRE ATT&CK® Defender™ (MAD) Adversary Emulation course, you’ll learn how to emulate real-world adversary threats to improve cybersecurity. Leveraging the MITRE ATT&CK Framework, you will research, plan, and execute adversary emulation activities in hands-on labs.

Time
8 hours 5 minutes
Difficulty
Intermediate
CEU/CPE
9
Share
NEED TO TRAIN YOUR TEAM? LEARN MORE
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Course Content
Module 1: Adversary Emulation Fundamentals
Adversary Emulation Course Introduction
8m
Lab: Touring the CTID Adversary Emulation Library
1h
Optional Lab: Setting up Your Own Lab Environment
1h
Executing the FIN6 Adversary Emulation Plan (Lab 1.3)
45m
Module 4: Implementing Adversary TTPs

4.3Planning TTP Implementations (Lab 4.1 Overview)

10m

4.4Planning TTP Implementations (Lab 4.1 Walkthrough)

30m

4.5Implementing Adversary TTPs (Lab 4.2 Overview)

10m

4.6Implementing Adversary TTPs (Lab 4.2 Walkthrough)

30m

4.7Automating Adversary TTPs (Lab 4.3 Overview)

10m

4.8Automating Adversary TTPs (Lab 4.3 Walkthrough)

10m

4.9Identifying Detections and Mitigations (Lab 4.4 Overview)

10m

4.10Identifying Detections and Mitigations (Lab 4.4 Walkthrough)

30m
Module 5: Executing Adversary TTPs

5.4Developing an Adversary Emulation Plan (Lab 5.1 Overview)

10m

5.5Developing an Adversary Emulation Plan (Lab 5.1 Walkthrough)

20m
Course Description

Who should take this course?

This course is designed for experienced and skilled cybersecurity practitioners who are interested in emulating real-world threats to assess cybersecurity effectiveness.

What are the prerequisites for this course?

You will gain the most benefit from this course if you have mastered the following:

  • MITRE ATT&CK® Defender™ (MAD) ATT&CK Fundamentals Training
  • Proficient in administering Windows and Linux systems from the command line
  • Proficient in basic networking concepts (OSI Model and TCP/IP)
  • Proficient in Virtual Machine software such as VMWare or VirtualBox
  • Familiar with common red team/pentester software and techniques (examples: Kali Linux distribution, Metasploit, Nmap, Mimikatz, etc.)

Why should I take this course?

In this course, you will gain the following capabilities:

  • Understand cyber adversary emulation’s purpose, its characteristics, and common use
  • cases.
  • Leverage the MITRE ATT&CK Framework to inform adversary emulation planning activities, including defining engagement objectives, scope, and rules of engagement.
  • Use cyber threat intelligence to select emulated threats of salient interest to the sponsor organization.
  • Implement adversary emulation tactics, techniques, and procedures (TTPs) based on real-world cyber threats.
  • Execute adversary TTPs to assess and improve cybersecurity, while balancing realism against time and safety constraints.
  • Use the MITRE ATT&CK Framework to communicate adversary emulation activities, findings, and recommendations for improvement.

What makes this course different from other courses on similar topics?

This course is part of the MITRE ATT&CK® Defender™ (MAD) cybersecurity training and certification program produced by MITRE's own subject matter experts. The lead instructor for this course, Michael C. Long II, is a principal cyber adversary emulation engineer at MITRE and is truly an expert in this field. You will be learning how to leverage ATT&CK for adversary emulation from the people who created the ATT&CK framework.

Why should I take this course on Cybrary and not somewhere else?

This course enables you to learn from one of the foremost experts in the field, and our on-demand format affords you the flexibility to learn at your own pace.

Instructed By
Michael C. Long II
Michael C. Long II
Principal Cyber Adversary Emulation Engineer at MITRE
Instructor
Govardhen Arunagiri
Govardhen Arunagiri
Offensive Security Engineer at MITRE
Instructor
Provider
Cybrary
Course Components
On Demand Videos to learn from industry leaders
Certificate of Completion
Certificate Of Completion

Complete this entire course to earn a MITRE ATT&CK Defender™ ATT&CK® Adversary Emulation Certificate of Completion