Episode 34: Ryan Hausknecht (Again)
Detection: Challenging Paradigms
00:00
How to Defend Against a Technique That Exists in Azure
MITRE is built out for the CTI community at the end of the day. I wanted to know, all right, well, this technique exists. How do I defend against it? To my own criticism, when I first released a TRM, I think I was so hyper focused on actually getting all known techniques catalogued that I didn't really focus too much on the defensive side. Like there was defensive stuff there, but it wasn't as good as it is I have it now.
Play episode from 29:33
Transcript
