Validating Defenses Quickly with Micro Emulation Plans

Issued by AttackIQ

The holder of this badge has knowledge of the micro-emulation plan project from MITRE’s CTID and its use in testing security controls, the difference between atomic testing and threat emulation, why micro-emulation plans focus on key attack techniques, and how to create and execute micro-emulation plans using the AttackIQ platform. They can also test for specific ATT&CK techniques with the micro emulation plans

Type Learning
Level Intermediate
Time Hours
Cost Free

Skills

Earning Criteria

The course covers topics such as Atomic testing, Threat emulation, Inter-Process Communication, Process Injection, Exploitation for Privilege Escalation, Access Token Manipulation, Lateral Tool Transfer, Remote System Discovery, and more. The course also covers micro-emulation plans such as Named Pipes, Windows Registry, and User Execution, and provides an understanding of how to test these micro-emulation plans to validate the security controls of an organization.
The holder of this badge has scored 80% or higher on a final exam evaluating their knowledge of the course material.