summiting-the-pyramid
summiting-the-pyramid copied to clipboard
center-for-threat-informed-defense
Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research includes a scoring model, methodology, and worked examples.
I try to apply this in relation with my project Avred (related to Antivirus signatures), and it got me thinking. If an AV has a signature of a tool, it...
### Observable PowerShell EventID 4104 ScriptBlockText ### Observable Placement Level 2, Column A ### Research When detecting for specific values in ScriptBlockText, we're basically looking for a string representation of...
Metadata
Owner
center-for-threat-informed-defense
Metadata
Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research includes a scoring model, methodology, and worked examples.