Attack Frameworks: APT, Cyber Kill Chain, MITRE ATT&CK and the Diamond Model
Teaches the frameworks used to make sense of threat actors, the lifecycle of advanced persistent threats (APT) and attacks; demonstrates in practice how to classify and prioritize indicators of compromise (IoC).
InstructorDr. Soner Çelik
Target audienceSOC analysts, incident response teams, security engineers
Duration1 days
Training content
- Cyber threat categories, threat actors and attack motives
- Advanced persistent threats (APT) and the APT lifecycle
- The Cyber Kill Chain methodology
- Mapping tactics and techniques with MITRE ATT&CK
- The Diamond Model of Intrusion Analysis
- Indicators of compromise (IoC), their categories and the Pyramid of Pain
At the end of this training, participants
- Position an attack step by step on the Cyber Kill Chain and MITRE ATT&CK.
- Establish the relationship between adversary, infrastructure, capability and victim using the Diamond Model.
- Prioritize IoCs by type and defensive value.
Training method
Live instructionMapping exercise based on real attack cases