Hello and congratulations
on reaching the end of our
application of the miter attack
framework journey today,
we're going to look at our core
summary and what
we should know at this point in
time.
So we covered the following phases
in the MicroTech framework.
And in order
of execution based on
what an attacker would be doing,
moving through initial access.
All the way down to getting
credentials.
And then moving over into discovery
all the way through to impact,
so each of these phases has
multiple vectors, some we covered,
some we didn't.
But you can take what we've looked
at, take what we've discussed,
review the framework in your
own time, in your own industry.
Again, it's got more than just the
enterprise area we've looked at.
It's got mobile devices.
I believe they're working on ICS and
a number of other things.
And so using these
frameworks to map them to
your specific needs will help
you to reduce risk.
And so the key points overall
that we want to take away from this
is that threat actors
are not always easy to spot.
It's not always going to be a
telltale sign or a dead giveaway.
But you just have to look for that
little bit of smoke to maybe find
the fire threat.
Actors are crafty in their ability
to bypass controls.
You know, they've got ways to bypass
automated controls.
And so depending on those tools,
it's not always a must.
We have to have that and a
combination of human intervention
and review, which is ultimately
going to give us the best
protection.
And that end user awareness,
training and due diligence can make
a difference.
Mapping your efforts can aid
in the overall risk reduction
efforts.
And the attack surface awareness
that you have from that will help
you to better understand where your
holes and gaps are.
So using this framework, mapping
out your organization's controls
accordingly, understanding your
risks will overall lead
to a harder time for threat actors
to get to your data and systems and
make you a little bit more secure
and help you to sleep a little
better at the end of the day.
So I thank you for being a part of
this with me here.
I thank you for your time and I look
forward to seeing you again soon.