There is a big difference between seeing the big cyber events and trends happening around us, and taking control of the situation to reduce their impact. This channel will aim to make sense of those events and show how we can reduce the noise to focus on our own threat picture and improve defenses.
Hey Mike, Thank you for wonderful video. I am comparing 2 APT group layers. Suppose, I want to select few techniques in an existing layer manually , how can i do that? I could not see any options to select additional techniques. Thanks in advance.
Assuming you have already selected some techniques via a Group search or something, you can click on additional techniques to add them in. The trick is to ensure you actually score or color those before you deselect them or move away from that tab.
Hello Ben! the EMU plugin is the key to getting adversaries imported. you would need to activate this in the Configuration for plugins and then reboot the Caldera instance. Depending on how you deployed it, you may find it is a little flakey - I have my best luck with it running on an Linux (Ubuntu) VM, rather than as a container on local host.
Hello Aniket! There are a lot of great threat intel blogs out there by Cisco and others that actually do exactly that. A great one to follow can be seen here: blog.talosintelligence.com/2021/08/vice-society-ransomware-printnightmare.html