Automated Security Control Validation

A Year of Impact: AttackIQ’s Applied Research in Threat-Informed Defense

Reactive to Preactive. Atomic to Anatomic. Lists to Graphs. Simulation to Emulation. To be prepared for the next attack, defenders must adapt and shift their focus to a threat-informed defense, to think like the adversary, and to test their security programs in a realistic manner.

February 27, 2023 Read More

Adversary Emulation

Democratizing the Practice of Adversary Emulation

AttackIQ is democratiziing the practice of threat-informed defense and adversary emulation, including by funding research from the Center for Threat-Informed Defense on micro-emulation planning. Learn more out how we put adversary emulation into practice in the AttackIQ Security Optimization Platform.

February 14, 2023 Read More

Adversary Emulation

Testing with Realism: Attack Flows and AttackIQ Attack Graphs

AttackIQ and the Center for Threat-Informed Defense are furthering the art of adversary emulation with the Center's new Attack Flow project. Building on our deep research partnership with the Center, AttackIQ's Attack Graphs emulate the adversary with specificity and realism to test advanced cyberdefense technologies against multi-stage attacks. Read on for more.

March 11, 2022 Read More

Cyberattack

How to Pitch Your CFO on Automated Security Control Validation

CFOs are often perceived as gatekeepers to the company’s cash coffers. With different functional leaders vying for project investments, it is true that the role of the CFO is to help prioritize the company’s spend, based on the business growth plan and trajectory.

July 9, 2021 Read More

TTPs

10 Ways to Apply the MITRE ATT&CK Framework in Your Cybersecurity Strategy

There are a number of ways that the MITRE ATT&CK framework can be used in your cybersecurity practice. Here are 10 of the most important as laid out in the MITRE ATT&CK for Dummies eBook.

June 22, 2021 Read More