Course

Certified MITRE ATT&CK Practitioner

MITRE framework and mapping.
Get Started
AU
Admin User
Course Instructor
Overview

Introduction to MITRE ATT&CK & Cyber Kill Chain

Overview

Topics:

  • ATT&CK matrix structure (Tactics → Techniques → Sub-techniques)

  • Mapping ATT&CK to incidents

  • ATT&CK vs Kill Chain

Activity:
Map 3 sample events to ATT&CK techniques.

Announcements
forum
Get access
Lessons

Deep Dive into Key Tactics (Recon → Impact)

Topics:

  • Persistence techniques

  • Defense evasion

  • Credential access

  • Lateral movement pathways

  • Exfiltration methods

Assignment:
Select one APT group & map its techniques.

Activities: 0

ATT&CK-Based Detection Engineering

Topics:

  • Building detection logic

  • Mapping SIEM rules to ATT&CK

  • Gap assessment

  • Prioritizing detection improvements

Practical:
Create detection mapping table for 10 ATT&CK techniques.

Activities: 0

Reporting & Operationalizing ATT&CK

Topics:

  • Using ATT&CK Navigator

  • ATT&CK Heatmaps

  • Executive reporting using ATT&CK visuals

Final Assignment:
Prepare ATT&CK threat heatmap.

Activities: 0