Using the MITRE ATT&CK Framework with Exabeam for Threat Hunting and Investigations 

Hi there. The AV signature refers to the virus signature, its unique data, or bits of code... almost like a fingerprint.

Exabeam thanks for brighten things up ! Im a user of exabeam ! Your videos are really helpful and informative ! Thanks a lot !

Hi Pavan. CVEs are part of the Pre-Att&CK framework. In the Att&CK framework, Exabeam ties detections to TTPs. The approach is CVE agnostic since most exploitation of vulnerabilities involve a new process execution, lateral movement, covering tracks, etc. Our goal is to provide visibility into detecting threats using a dynamic approach such as TTPs instead of a static indicator like IoCs.