MITRE ATT&CK Coverage by Security Tools Is Inconsistent, Incomplete: Researchers
MITRE ATT&CK Coverage by Security Tools Is Inconsistent, Incomplete: Researchers
thecyberexpress.com MITRE ATT&CK Coverage By Security Tools Is Inconsistent: Study
Cybersecurity tools are inconsistent and incomplete in their coverage of the MITRE ATT&CK framework, according to research presented at MITRE ATT&CKcon.
1
comments
"As Virkud’s abstract noted, “even when attempting to detect the same malicious entity, products completely disagree about the appropriate ATT&CK technique annotations 51% of the time, while fully agreeing just 2.7% of the time."
That's worse than I expected, and I had low expectations.
Cool research, though.