MITRE ATT&CK-based Threat Mapping and Active Defense
Validate your skills in performing SOC assessments based on MITRE ATT&CK
5 hr 15 m of video content
Intermediate
Validation of Completion Included
Buy this course now
$99.99Course Overview
MITRE ATT&CK has become a globally recognized knowledge base for understanding how real-world adversaries plan, execute, and sustain cyber-attacks. Instead of focusing only on compliance, it provides a behavior-driven view of threats, helping security teams strengthen detection, response, and defense strategies. This course equips learners with the practical ability to use the ATT&CK framework for threat intelligence, detection engineering, and security operations across modern enterprise environments.
This course begins with an introduction to MITRE ATT&CK, its history, terminology, and how it compares with traditional frameworks like NIST and ISO 27001. It then covers the cyber-attack lifecycle and the Cyber Kill Chain, followed by using ATT&CK for threat intelligence, adversary profiling, and navigating attack.mitre.org. You will learn to map logs and telemetry to ATT&CK techniques, build portable detections using Sigma and YARA, and transform raw data into actionable threat reports. The course also explores ATT&CK Navigator for analysis, visualization, coverage mapping, and SOC maturity assessment. It further introduces active defense concepts using MITRE SHIELD and ENGAGE, before moving into advanced applications like Cyber Analytics Repository, threat hunting, and Active Directory attack techniques.
By the end, you will apply MITRE ATT&CK for threat intelligence, detection engineering, defense planning, and threat hunting with hands-on skills to strengthen organizational security operations.
What You Will Learn
- Learn everything about the Cyber Kill Chain, as well as how to perform threat intelligence using MITRE ATT&CK.
- Learn how to map data to ATT&CK and how to implement small and highly portable detection tests mapped to the MITRE ATT&CK.
- Learn how to use the MITRE ATT&CK Matrix.
- Learn how to work with MITRE SHIELD and how to generate defensive recommendations with SHIELD.
- Know how to install and set up MITRE Caldera, the automated cyber adversary emulation system, and how to perform Atomic Red Team tests for MITRE ATT&CK.
Program Curriculum
- Introduction to MITRE ATT&CK
- Understanding the Cyber Attack Lifecycle
- Introduction to Cyber Kill Chain
- Chapter 1 Quiz
- Introduction to Threat Intelligence
- Using MITRE ATT&CK for Threat Intelligence
- Introduction to attack.mitre.org
- Understanding ATT&CK Matrices
- Chapter 2 Quiz
- Mapping Data to MITRE ATT&CK
- Creating Portable Detection Tests
- Raw Data vs. Finished Threat Reports
- Chapter 3 Quiz
- Using MITRE ATT&CK for Analysis
- Using MITRE ATT&CK Navigator
- Using MITRE ATT&CK Navigator for Analysis
- Key MITRE ATT&CK Use Cases
- Chapter 4 Quiz
- Concept of Active Defense
- Using MITRE ATT&CK for Defense Strategy
- Working with MITRE SHIELD/ENGAGE
- Defensive Recommendations with SHIELD
- Chapter 5 Quiz
- Implementing MITRE Cyber Analytics Repository (CAR)
- Threat Hunting with MITRE ATT&CK
- TTPs for Active Directory Attacks
- Chapter 6 Quiz
Instructor
Abdul Mateen
Abdul Mateen is a seasoned Cyber Threat Intelligence Analyst and Information Security Trainer. His professional experience brings over 1,500 hours of hands-on training experience, having successfully trained more than 2,800 students through both in-person and online sessions. With a strong foundation in threat analysis and response, Abdul Mateen
Buy this course now
$99.99Couldn't load pickup availability
Get Immediate access for one year today!
Upgrade to Pro Plans and Get Full Access Today!
Get this course, along with 900+ courses and 70+ learning paths and more in one subscription. Learn more
Unlock All AccessPlans start from $33/mo. Cancel anytime.
Join over 1 Million professionals from the most renowned Companies in the world!
Choose the Pro Plan That Fits Your Learning Journey
Invest in your future with flexible Pro subscription plans. Whether you're starting your cybersecurity journey or expanding your expertise, choose the membership duration that works for you and gain access to our complete learning platform.
Pro
Ideal for continuous learning, offering extensive resources with 900+ courses and diverse Learning Paths to enhance your skills.
What is included
- Access to 900+ Premium Short Courses
- 70+ Structured Learning Paths
- Validation of Completion with All Courses and Learning Paths
- New Courses Added Every Month
Pro +
Experience immersive learning with Practice Labs and CTF Challenges for comprehensive skill-building.
Everything in Pro and
- 600+ Practice Labs with Guided Instructions
- 400+ CTF Challenges with Detailed Walkthroughs
- New Practice Labs and Challenges Added Every Month
Pro
Ideal for continuous learning, offering extensive resources with 900+ courses and diverse Learning Paths to enhance your skills.
What is included
- Access to 900+ Premium Short Courses
- 70+ Structured Learning Paths
- Validation of Completion with All Courses and Learning Paths
- New Courses Added Every Month
Pro +
Experience immersive learning with Practice Labs and CTF Challenges for comprehensive skill-building.
Everything in Pro and
- 600+ Practice Labs with Guided Instructions
- 400+ CTF Challenges with Detailed Walkthroughs
- New Practice Labs and Challenges Added Every Month
Related Courses
-
Software Development
Explore the basics of Bootstrap and learn to create a website in 4 easy steps
Explore the basics of Bootstrap and learn to create a website...
$49.99Beginner
1 hr 30 m
Hello
-
Security Architecture and Operations
A comprehensive guide to understanding the in-depth functioning of routers and switches for the preparation of CCNA Exam.
A comprehensive guide to understanding the in-depth functioni...
$49.99Intermediate
2 hr 0 m
Hello
-
Software Development
Learn full-stack web development using JavaScript (ReactJS, NodeJS, LoopbackJS, Redux and Material-UI)!
Learn full-stack web development using JavaScript (ReactJS, N...
$79.99Beginner
24 hr 17 m
Hello
-
DevSecOps
From React.js Fundamentals to Crafting an Online Storefront
From React.js Fundamentals to Crafting an Online Storefront
$49.99Advanced
3 hr 30 m
Hello
-
Cybersecurity
This course is ideal for individuals who desire to pass the Information Systems Security Professional CISSP Certification Exam and want to gain more insight and knowledge around IT, Information, and Cyber Security from a management/senior leader perspective.
This course is ideal for individuals who desire to pass the I...
$69.99Intermediate
6 hr 30 m
Hello
-
Software Development
A must tool for every DevOps engineer
A must tool for every DevOps engineer
$49.99Intermediate
1 hr 27 m
Hello
-
Vulnerability Assessment and Pentesting
Fun way to learn ethical hacking by playing online hacking games - hacking real websites legally
Fun way to learn ethical hacking by playing online hacking ga...
$69.99Beginner
4 hr 18 m
Hello
-
Software Development
Securing and Automating Linux and Windows Systems with Advanced Ansible Playbooks
Securing and Automating Linux and Windows Systems with Advanc...
$99.99Advanced
5 hr 34 m
Hello