Hello and welcome
to the course overview for the
application of the minor attack
framework.
I'm so excited to have you here with
me today.
I am your instructor,
Robert Smith.
So a little bit about
me before we jump in.
I've got over a decade of it
and IT security experience.
I've worked in various areas.
I actually have my humble beginnings
as a networking specialist and
help desk support specialists.
So those were the areas where I
worked predominantly
and then I worked my way into the
security industry.
So I've gotten several
certifications to include OSTP,
CISSP and Cizre, and
I'm currently
conducting penetration tests and
assessments as my day to day.
I've been working with Siberry for
almost two years, bringing you
things like the Test Standard
videos, the Calli videos,
as well as these minor videos
and our series Breaking Stuff
with Robert.
I also love video games and good
books. You can catch me playing
things like Diablo and Dark
Souls and Demon Souls and things of
that nature. So I love a good
challenge when it comes to gaming,
just like I enjoy things
like hack the box and penetration
testing and things of that nature.
So I like a good puzzle.
So what are some prerequisites when
it comes to the
application of the MIETEK framework
where you want to come into this
with a basic technical terminology?
So knowing how computers and
networks work at a high level basic
terminology with respect to
controls, countermeasures and risk
reduction as well.
So essentially, as we're walking
through these things and we're
talking about firewalls and
compensating controls and
you end user education and policies
and procedures where those come up,
you want to kind of be aware of what
those things mean and how
they fit into the grand scheme of
this framework.
Now, our target audience is going
to be business leaders looking to
understand current attack vectors
and controls, security leaders
looking to understand how minor can
be applied to your operations.
Analysts looking at the map vectors
to their efforts and solutions,
and vendors looking to provide
mappings to their offerings against
the framework.
Anyone can really enjoy this and
can kind of play what
if and walk through the framework
and see what an attacker may do and
then come up with scenarios that
they can use to combat that.
The objectives of this course are to
describe for you what the framework
is. And then we will also go through
each of the phases.
Initial access, execution,
persistence, privilege, escalation,
defense, evasion, credential access,
discovery, lateral movement,
collection, command and control,
exfiltration and impact.
Each of these will have several
vectors that will cover and a threat
action would essentially move
through each of these phases as
they're attacking an organization.
Well, I'm excited to get started and
work with you on this.
I want to thank you for viewing this
overview.
And with that, we're going to walk
into what is the minor
attack framework.