MITRE plans to restructure threat detection taxonomy in ATT&CK framework update

MITRE is adding new details on the threat detection strategies as part of an update to the widely adopted ATT&CK framework used by the Cybersecurity and Infrastructure Security Agency and others, to allow users to make connections with a potential chain of adversary behavior.

“What I’m introducing today is nothing short of a complete restructuring change to detections within the MITRE ATT&CK framework,” MITRE ATT&CK defense lead Lex Crumpton said at a Oct. 14 event convening stakeholders to discuss...