Thriving Defense

Tag: author/Jordan_Anderson

31 items with this tag.

Apr 13, 2026
Technique matrices
- author/Jordan_Anderson
- type/stub
Apr 12, 2026
Summiting the Pyramid Levels
- author/Jordan_Anderson
- type/stub
Apr 11, 2026
comprehensively detect the middle of the attack
- author/Jordan_Anderson
- type/stub
Apr 03, 2026
MITRE ATT&CK® PRE
- author/Jordan_Anderson
- type/stub
Apr 03, 2026
Mutually Exclusive and Collectively Exhaustive (MECE)
- author/Jordan_Anderson
- type/stub
Mar 28, 2026
implement tests based on TRRs
- author/Jordan_Anderson
- type/stub
Mar 27, 2026
Techniques that should always be yielded
- author/Jordan_Anderson
- type/stub
Mar 27, 2026
Turning the TIDE with Test-Initiated Detection Engineering
Mar 27, 2026
MITRE ATT&CK is not flat
Mar 25, 2026
identify impossible travel
- author/Jordan_Anderson
- type/stub
Mar 24, 2026
systematically disrupt attacker behavior
- author/Jordan_Anderson
- type/stub
Mar 19, 2026
Validating vendor detection effectiveness
Mar 19, 2026
attackers are avoiding EDR
- author/Jordan_Anderson
- type/stub
Mar 19, 2026
prove coverage with validation tests
Mar 19, 2026
Pyramid of Pain
- author/Jordan_Anderson
- type/stub
Mar 19, 2026
Where detections come from
- author/Jordan_Anderson
- type/article
Mar 18, 2026
detection libraries must be repeatedly validated
Mar 10, 2026
MITRE ATT&CK® is not designed for detection
- author/Jordan_Anderson
- type/stub
Mar 07, 2026
Efficiency-Thoroughness Tradeoff (ETTO) principle
- author/Jordan_Anderson
- type/definition
Mar 07, 2026
Acquire rules and tests for yielded techniques at scale
Mar 07, 2026
false positives and false negatives occur on a continuum
- author/Jordan_Anderson
- type/stub
Mar 07, 2026
Do not require comprehensive coverage for yielded techniques
Mar 07, 2026
detections based on threat intelligence are always opportunistic
- author/Jordan_Anderson
- type/stub
Mar 07, 2026
Technique Research Report (TRR)
- author/Jordan_Anderson
- type/definition
Mar 07, 2026
Aggressively tune rules linked to yielded techniques
Mar 07, 2026
Selecting Advantageous Terrain
Mar 07, 2026
attackers abuse legitimate capabilities
- author/Jordan_Anderson
- type/stub
Mar 07, 2026
some techniques should only be detected opportunistically
Mar 07, 2026
ACRE
- author/Jordan_Anderson
- type/article
Mar 07, 2026
ATT&CK Procedures and Instances
- author/Jordan_Anderson
- type/definition
Mar 07, 2026
Trusted Service Infrastructure (TSI)
- author/Jordan_Anderson
- type/definition

Created with Quartz v4.5.2 © 2026

GitHub