Monitoring - Detecting Attacks with MITRE ATT&CK
Schneider, Michael · Zenodo (CERN European Organization for Nuclear Research) · 2019
Understanding the techniques used in attacks helps in detecting them. MITRE ATT&CK Enterprise Matrix includes actual attack statistics and techniques. Running it requires configuration of additional Windows audit settings. Correlations between events can be used to identify attacks.