Mitre Att&ck Framework Courses and Certifications

Security BSides San Francisco

Don't Boil the Ocean - Using MITRE ATT&CK to Guide Hunting Activity

1 review

Learn to use the MITRE ATT&CK framework for effective threat hunting in less than an hour with Security BSides San Francisco. Gain insights to better operationalize findings.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Credential Access with Mimikatz

28 ratings at Pluralsight

In addition to other functionality, Mimikatz extracts password hashes and clear-text credentials from system memory. Mimikatz can also manipulate domain account passwords or display protected credentials stored in files.

• Pluralsight
• 26 minutes
• On-Demand
• Free Trial Available

Reconnaissance with OWASP Amass

19 ratings at Pluralsight

The first step on a red team exercise is the Reconnaissance phase. In this course we cover the OWASP Amass tool, which allows you to enumerate domains and find potential attack vectors on your target.

• Pluralsight
• 20 minutes
• On-Demand
• Free Trial Available

Initial Access with Aircrack-ng

18 ratings at Pluralsight

Attacking wireless networks is one of the main tasks during a red team exercise. The Aircrack-ng suite is a framework for WiFi security assessments. In this course, we cover how to get initial access on wireless networks using the Aircrack-ng tool.

• Pluralsight
• On-Demand
• Free Trial Available

Credential Access with Responder

18 ratings at Pluralsight

After getting initial access in a network, your next task is to move laterally and escalate privileges. In this course, you will see the Responder tool which allows you to exploit vulnerabilities on the LLMNR and NBT-NS protocols to get credentials

• Pluralsight
• On-Demand
• Free Trial Available

Red Team Tools for Emulated Adversary Techniques with MITRE ATT&CK

13 ratings at Pluralsight

Red team operations are most effective when tailored to test an organization's defenses against the most likely threat. Learn to leverage MITRE ATT&CK in combination with open source tools in the red team tools path to emulate APT attacks.

• Pluralsight
• On-Demand
• Free Trial Available

Reconnaissance with Sn1per

14 ratings at Pluralsight

In this cyber security course, we cover the Sn1per tool, which allows you to perform passive and active reconnaissance against your target.

• Pluralsight
• 19 minutes
• On-Demand
• Free Trial Available

Lateral Movement with Mimikatz

12 ratings at Pluralsight

Among other features, Mimikatz provides lateral movement capabilities such as pass the hash, user impersonation, and the creation of golden and silver tickets. Skill up your lateral movement techniques with Mimikatz.

• Pluralsight
• 29 minutes
• On-Demand
• Free Trial Available

Lateral Movement with Infection Monkey

11 ratings at Pluralsight

Learn to map and compromise vulnerable network paths with a real propagating payload and correlate lateral movement testing with MITRE ATT&CK and Zero Trust Principles.

• Pluralsight
• On-Demand
• Free Trial Available

Credential Access with THC Hydra

10 ratings at Pluralsight

THC Hydra is a fast and powerful parallelized network login cracker with support for a wide variety of network protocols. Skill up your brute forcing techniques by leveraging THC Hydra to identify weak passwords.

• Pluralsight
• On-Demand
• Free Trial Available

Collection with PowerSploit

10 ratings at Pluralsight

After getting access to a few machines on the network, your next task in a red team engagement is collecting sensitive information. In this course, you will explore the PowerSploit tool, which is one of the main tools of a red team professional.

• Pluralsight
• On-Demand
• Free Trial Available

Defense Evasion with ProxyChains

10 ratings at Pluralsight

In this cyber security course you will learn how to use ProxyChains and TOR to re-route your network traffic and bypass security tools.

• Pluralsight
• 21 minutes
• On-Demand
• Free Trial Available

Execution with macro_pack

Knowing how to masquerade malicious content into legitimate files is key when performing phishing attacks. In this course, you will explore the macro_pack tool, which allows you to hide malicious payloads into Microsoft Office files.

• Pluralsight
• On-Demand
• Free Trial Available

Privilege Escalation with Rubeus

After getting initial access to a domain, your job is to escalate privileges to get admin-level access. In this course, you will learn how to use Rubeus to perform two well-known privilege escalation attacks: Kerberoasting and AS-REP Roasting.

• Pluralsight
• 20 minutes
• On-Demand
• Free Trial Available

Learn to use the MITRE ATT&CK® framework to understand and combat cyber threats. Gain knowledge on adversary tactics, techniques, and procedures in just 1-2 hours.

• Cybrary
• 1-2 hours
• On-Demand
• Paid Course