Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the easy-accordion-free domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php on line 6114

Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the zoho-flow domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php on line 6114

Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wordpress-seo domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php on line 6114

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893
{"id":1635,"date":"2023-11-08T23:50:00","date_gmt":"2023-11-08T23:50:00","guid":{"rendered":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/"},"modified":"2023-11-08T23:50:00","modified_gmt":"2023-11-08T23:50:00","slug":"introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm","status":"publish","type":"post","link":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/","title":{"rendered":"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm"},"content":{"rendered":"

Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we\u2019re discussing the importance of having comprehensive coverage of MITRE ATT&CK TTPs in security operations, and how Cisco technology can help to achieve this goal.<\/p>\n

[embedded content]<\/iframe><\/p>\n<h2><strong>Why MITRE ATT&CK TTPs are relevant to security operations?<\/strong><\/h2>\n<p>MITRE ATT&CK is a globally recognized framework that outlines various tactics, techniques, and procedures based on observed behaviors and used by threat actors during a cyberattack. The framework is divided into two main categories: tactics and techniques. Tactics represent the overall goal of an adversary, while techniques represent the specific methods used to achieve that goal. Procedures are the specific steps taken to execute the technique.<\/p>\n<h2><strong>Why is comprehensive coverage important?<\/strong><\/h2>\n<p>The cyberthreat landscape is constantly evolving, and new TTPs are being developed every day.<\/p>\n<p class=\"p1\">One type of attack that has been gaining popularity is living-off-the-land binary (LOLBin) exploitation. This type of attack has been leveraged by nefarious threat groups such as Volt Typhoon, BlackTech in addition to Jaguar Tooth malware, using legitimate tools and software already present on a victim\u2019s system to carry out malicious activities. These attacks are difficult to detect because they do not involve the use of malware or other malicious software that would be flagged by traditional endpoint security solutions. Instead, attackers use tools such as PowerShell, WMI, and other built-in Windows utilities to achieve their objectives.<\/p>\n<p>One way to protect against living off the land attacks recommended by this is to monitor system processes and network activity looking for suspicious behavior. This defense can be done using the combination of endpoint and network security controls and an extended detection and response solution on top to detect and correlate anomalies found in system activities and network traffic patterns, so security teams are timely alerted on potential attacks.<\/p>\n<p>By having a comprehensive understanding of the various tactics, techniques, and procedures used by attackers, SOC teams can quickly identify and mitigate any potential threats before they cause significant damage.<\/p>\n<h2><strong>Cisco Breach Protection<\/strong><\/h2>\n<p>Cisco is announcing the launch of Breach Protection to protect against the constantly evolving techniques used by threat actors. Cisco Breach Protection provides a comprehensive understanding of attacks by mapping observed adversary behaviors to MITRE ATT&CK tactics, techniques, and procedures (TTPs) in real-time.<\/p>\n<p>Cisco Breach Protection is available in three tiers \u2013 Essentials, Advantage and Premier. Each tier is designed to cater to specific organization needs and delivers a range of outcomes to ensure complete coverage:<\/p>\n<p><strong>Breach Protection Essentials<\/strong> covers most attacks that an organization will encounter by combining email, endpoint (EDR), and XDR into a turnkey offer.\u00a0 Most attacks today still leverage a phishing email to deliver malware exploiting an endpoint vulnerability or use an endpoint application (termed living off the land attack) to escalate privileges, establish persistence or traverse laterally.\u00a0 Cisco Breach Protection provides detection and response to these types of attacks and adversaries like Wizard Spider and Sandworm.<\/p>\n<p><strong>Breach Protection Advantage<\/strong> covers all the attacks an organization is likely to encounter, especially attacks on very complex environments like IT\/OT\/IIoT or from very sophisticated nation-state threat actors like BlackTech, Volt Typhoon, or Jaguar Tooth.\u00a0 By combing network telemetry and network-based detections from cloud and traditional on-premises infrastructure, only Cisco can cover the full range of attacks seen in the wild today.<\/p>\n<p><strong>Breach Protection Premier<\/strong> delivers all the above capabilities to an organization that doesn\u2019t have enough human resources to manage their Security Operations or is looking to fully outsource their SOC operation by wrapping the offer with managed services that delivers an Incident Response retainer, penetration testing services, red\/blue\/purple teaming activities, and managed detection and response.<\/p>\n<p>All the above is available to customers who also already have 3rd party security products. The technical outcomes are the same regardless of whether customers choose \u00e0 la carte Cisco products, an EA or the Breach Protection suite.\u00a0 But for customers who choose the suite they can achieve the outcomes listed above at very attractive financial terms and a superior total cost of ownership without having to deal with the challenges of stitching together multiple 3rd party vendors, dealing with multiple 3rd party purchase orders, or managing multiple different consoles.<\/p>\n<h2><strong>Cisco Breach Protection<\/strong><\/h2>\n<p>In today\u2019s evolving cyberthreat landscape, having comprehensive coverage of MITRE ATT&CK TTPs is crucial for SOC teams. It ensures that they are equipped to detect and respond to any potential threat quickly. By analyzing the TTPs used in previous attacks like ransomware, SOC teams can develop a better understanding of the tactics used by threat actors and develop more effective strategies to prevent future attacks. So, if you\u2019re looking to enhance your SOC\u2019s capabilities, make sure you have complete coverage of MITRE ATT&CK TTPs leveraging Cisco Breach Protection!<\/p>\n<p>Learn more about <a href=\"https:\/\/www.cisco.com\/site\/us\/en\/products\/security\/breach-protection\/index.html\">Cisco Breach Protection<\/a>.<\/p>\n<h2 class=\"p1\"><strong>Explore more blogs on Cisco Security Suites here:<\/strong><\/h2>\n<p class=\"p1\"><a href=\"https:\/\/blogs.cisco.com\/security\/introducing-cisco-user-protection-suite\" target=\"_blank\" rel=\"noopener\">The User Protection Suite<\/a><\/p>\n<p><em>We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!<\/em><\/p>\n<p><strong>Cisco Secure Social Channels<\/strong><\/p>\n<p><strong><a href=\"https:\/\/www.instagram.com\/CiscoSecure\/\" target=\"_blank\" rel=\"noopener\">Instagram<\/a><\/strong><strong><a href=\"https:\/\/www.facebook.com\/ciscosecure\/\" target=\"_blank\" rel=\"noopener\">Facebook<\/a><\/strong><strong><a href=\"https:\/\/twitter.com\/CiscoSecure\" target=\"_blank\" rel=\"noopener\">Twitter<\/a><\/strong><strong><a href=\"https:\/\/www.linkedin.com\/showcase\/cisco-secure\" target=\"_blank\" rel=\"noopener\">LinkedIn<\/a><\/strong><\/p>\n<div>\n\t\tShare\n<div class=\"twitter\">\n<div class=\"box\"><\/div>\n<\/div>\n<div class=\"facebook\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"http:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response&title=Introducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"linkedin\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"mail\">\n<div class=\"box\">\n\t<a class=\"share\" href=\"mailto:?subject=Cisco%20Blog:%20Introducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s&body=I%20saw%20this%20post%20on%20Cisco%20Blogs%20and%20thought%20you%20might%20like%20to%20read%20it.%0A%0AIntroducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s%0A%0Ahttps:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response%0A%0A****Disclaimer****%0A%0ACisco%20is%20not%20responsible%20for%20the%20content%20of%20this%20email,%20and%20its%20contents%20do%20not%20necessarily%20reflect%20Cisco%E2%80%99s%20views%20or%20opinions.%20Cisco%20has%20not%20verified%20the%20email%20address%20or%20name%20of%20the%20sender.\"> <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n<div class=\"share_text\">Share:<\/div>\n<div>\n<div class=\"twitter\">\n<div class=\"box\"><\/div>\n<\/div>\n<div class=\"facebook\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"http:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response&title=Introducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"linkedin\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"mail\">\n<div class=\"box\">\n\t<a class=\"share\" href=\"mailto:?subject=Cisco%20Blog:%20Introducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s&body=I%20saw%20this%20post%20on%20Cisco%20Blogs%20and%20thought%20you%20might%20like%20to%20read%20it.%0A%0AIntroducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s%0A%0Ahttps:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response%0A%0A****Disclaimer****%0A%0ACisco%20is%20not%20responsible%20for%20the%20content%20of%20this%20email,%20and%20its%20contents%20do%20not%20necessarily%20reflect%20Cisco%E2%80%99s%20views%20or%20opinions.%20Cisco%20has%20not%20verified%20the%20email%20address%20or%20name%20of%20the%20sender.\"> <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n<p>\u00a0\u00a0Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we\u2019re discussing the importance of having comprehensive coverage of\u00a0\u00a0<a href=\"https:\/\/feedpress.me\/link\/23532\/16436449\/introducing-cisco-breach-protection-delivering-detection-response\" target=\"_blank\" class=\"feedzy-rss-link-icon\" rel=\"noopener\">Read More<\/a>\u00a0Cisco Blogs\u00a0<\/p>","protected":false},"excerpt":{"rendered":"<p><\/p>\n<p>Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to\u2026 <a href=\"https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response?utm_medium=feed&utm_source=feedpress.me&utm_campaign=Feed%3A+CiscoBlogs\">Read more on Cisco Blogs<\/a><\/p>\n<p>\u200b<\/p>\n<p>Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we\u2019re discussing the importance of having comprehensive coverage of MITRE ATT&CK TTPs in security operations, and how Cisco technology can help to achieve this goal.<\/p>\n<p><iframe src=\"https:\/\/players.brightcove.net\/1384193102001\/41XYD7gTx_default\/index.html?videoId=6336678949112\" allowfullscreen=\"allowfullscreen\" width=\"640\" height=\"360\">[embedded content]<\/iframe><\/p>\n<h2><strong>Why MITRE ATT&CK TTPs are relevant to security operations?<\/strong><\/h2>\n<p>MITRE ATT&CK is a globally recognized framework that outlines various tactics, techniques, and procedures based on observed behaviors and used by threat actors during a cyberattack. The framework is divided into two main categories: tactics and techniques. Tactics represent the overall goal of an adversary, while techniques represent the specific methods used to achieve that goal. Procedures are the specific steps taken to execute the technique.<\/p>\n<h2><strong>Why is comprehensive coverage important?<\/strong><\/h2>\n<p>The cyberthreat landscape is constantly evolving, and new TTPs are being developed every day.<\/p>\n<p class=\"p1\">One type of attack that has been gaining popularity is living-off-the-land binary (LOLBin) exploitation. This type of attack has been leveraged by nefarious threat groups such as Volt Typhoon, BlackTech in addition to Jaguar Tooth malware, using legitimate tools and software already present on a victim\u2019s system to carry out malicious activities. These attacks are difficult to detect because they do not involve the use of malware or other malicious software that would be flagged by traditional endpoint security solutions. Instead, attackers use tools such as PowerShell, WMI, and other built-in Windows utilities to achieve their objectives.<\/p>\n<p>One way to protect against living off the land attacks recommended by this is to monitor system processes and network activity looking for suspicious behavior. This defense can be done using the combination of endpoint and network security controls and an extended detection and response solution on top to detect and correlate anomalies found in system activities and network traffic patterns, so security teams are timely alerted on potential attacks.<\/p>\n<p>By having a comprehensive understanding of the various tactics, techniques, and procedures used by attackers, SOC teams can quickly identify and mitigate any potential threats before they cause significant damage.<\/p>\n<h2><strong>Cisco Breach Protection<\/strong><\/h2>\n<p>Cisco is announcing the launch of Breach Protection to protect against the constantly evolving techniques used by threat actors. Cisco Breach Protection provides a comprehensive understanding of attacks by mapping observed adversary behaviors to MITRE ATT&CK tactics, techniques, and procedures (TTPs) in real-time.<\/p>\n<p>Cisco Breach Protection is available in three tiers \u2013 Essentials, Advantage and Premier. Each tier is designed to cater to specific organization needs and delivers a range of outcomes to ensure complete coverage:<\/p>\n<p><strong>Breach Protection Essentials<\/strong> covers most attacks that an organization will encounter by combining email, endpoint (EDR), and XDR into a turnkey offer.\u00a0 Most attacks today still leverage a phishing email to deliver malware exploiting an endpoint vulnerability or use an endpoint application (termed living off the land attack) to escalate privileges, establish persistence or traverse laterally.\u00a0 Cisco Breach Protection provides detection and response to these types of attacks and adversaries like Wizard Spider and Sandworm.<\/p>\n<p><strong>Breach Protection Advantage<\/strong> covers all the attacks an organization is likely to encounter, especially attacks on very complex environments like IT\/OT\/IIoT or from very sophisticated nation-state threat actors like BlackTech, Volt Typhoon, or Jaguar Tooth.\u00a0 By combing network telemetry and network-based detections from cloud and traditional on-premises infrastructure, only Cisco can cover the full range of attacks seen in the wild today.<\/p>\n<p><strong>Breach Protection Premier<\/strong> delivers all the above capabilities to an organization that doesn\u2019t have enough human resources to manage their Security Operations or is looking to fully outsource their SOC operation by wrapping the offer with managed services that delivers an Incident Response retainer, penetration testing services, red\/blue\/purple teaming activities, and managed detection and response.<\/p>\n<p>All the above is available to customers who also already have 3rd party security products. The technical outcomes are the same regardless of whether customers choose \u00e0 la carte Cisco products, an EA or the Breach Protection suite.\u00a0 But for customers who choose the suite they can achieve the outcomes listed above at very attractive financial terms and a superior total cost of ownership without having to deal with the challenges of stitching together multiple 3rd party vendors, dealing with multiple 3rd party purchase orders, or managing multiple different consoles.<\/p>\n<h2><strong>Cisco Breach Protection<\/strong><\/h2>\n<p>In today\u2019s evolving cyberthreat landscape, having comprehensive coverage of MITRE ATT&CK TTPs is crucial for SOC teams. It ensures that they are equipped to detect and respond to any potential threat quickly. By analyzing the TTPs used in previous attacks like ransomware, SOC teams can develop a better understanding of the tactics used by threat actors and develop more effective strategies to prevent future attacks. So, if you\u2019re looking to enhance your SOC\u2019s capabilities, make sure you have complete coverage of MITRE ATT&CK TTPs leveraging Cisco Breach Protection!<\/p>\n<p>Learn more about <a href=\"https:\/\/www.cisco.com\/site\/us\/en\/products\/security\/breach-protection\/index.html\">Cisco Breach Protection<\/a>.<\/p>\n<h2 class=\"p1\"><strong>Explore more blogs on Cisco Security Suites here:<\/strong><\/h2>\n<p class=\"p1\"><a href=\"https:\/\/blogs.cisco.com\/security\/introducing-cisco-user-protection-suite\" target=\"_blank\" rel=\"noopener\">The User Protection Suite<\/a><\/p>\n<p><em>We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!<\/em><\/p>\n<p><strong>Cisco Secure Social Channels<\/strong><\/p>\n<p><strong><a href=\"https:\/\/www.instagram.com\/CiscoSecure\/\" target=\"_blank\" rel=\"noopener\">Instagram<\/a><\/strong><strong><a href=\"https:\/\/www.facebook.com\/ciscosecure\/\" target=\"_blank\" rel=\"noopener\">Facebook<\/a><\/strong><strong><a href=\"https:\/\/twitter.com\/CiscoSecure\" target=\"_blank\" rel=\"noopener\">Twitter<\/a><\/strong><strong><a href=\"https:\/\/www.linkedin.com\/showcase\/cisco-secure\" target=\"_blank\" rel=\"noopener\">LinkedIn<\/a><\/strong><\/p>\n<div>\n\t\tShare<\/p>\n<div class=\"twitter\">\n<div class=\"box\"><\/div>\n<\/div>\n<div class=\"facebook\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"http:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response&title=Introducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"linkedin\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"mail\">\n<div class=\"box\">\n\t<a class=\"share\" href=\"mailto:?subject=Cisco%20Blog:%20Introducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s&body=I%20saw%20this%20post%20on%20Cisco%20Blogs%20and%20thought%20you%20might%20like%20to%20read%20it.%0A%0AIntroducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s%0A%0Ahttps:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response%0A%0A****Disclaimer****%0A%0ACisco%20is%20not%20responsible%20for%20the%20content%20of%20this%20email,%20and%20its%20contents%20do%20not%20necessarily%20reflect%20Cisco%E2%80%99s%20views%20or%20opinions.%20Cisco%20has%20not%20verified%20the%20email%20address%20or%20name%20of%20the%20sender.\"> <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n<div class=\"share_text\">Share:<\/div>\n<div>\n<div class=\"twitter\">\n<div class=\"box\"><\/div>\n<\/div>\n<div class=\"facebook\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"http:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response&title=Introducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"linkedin\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"mail\">\n<div class=\"box\">\n\t<a class=\"share\" href=\"mailto:?subject=Cisco%20Blog:%20Introducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s&body=I%20saw%20this%20post%20on%20Cisco%20Blogs%20and%20thought%20you%20might%20like%20to%20read%20it.%0A%0AIntroducing%20Cisco%20Breach%20Protection,%20Delivering%20Complete%20Detection%20and%20Response%20of%20MITRE%20ATT&CK%20TTP%E2%80%99s%0A%0Ahttps:\/\/blogs.cisco.com\/security\/introducing-cisco-breach-protection-delivering-detection-response%0A%0A****Disclaimer****%0A%0ACisco%20is%20not%20responsible%20for%20the%20content%20of%20this%20email,%20and%20its%20contents%20do%20not%20necessarily%20reflect%20Cisco%E2%80%99s%20views%20or%20opinions.%20Cisco%20has%20not%20verified%20the%20email%20address%20or%20name%20of%20the%20sender.\"> <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n<p>\u00a0\u00a0Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we\u2019re discussing the importance of having comprehensive coverage of\u00a0\u00a0<a href=\"https:\/\/feedpress.me\/link\/23532\/16436449\/introducing-cisco-breach-protection-delivering-detection-response\" target=\"_blank\" class=\"feedzy-rss-link-icon\" rel=\"noopener\">Read More<\/a>\u00a0Cisco Blogs\u00a0<\/p>\n<p><\/p>\n","protected":false},"author":0,"featured_media":1636,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-1635","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cisco-learning"],"yoast_head":"\n<title>Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm - JHC<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm\" \/>\n<meta property=\"og:description\" content=\"Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to\u2026 Read more on Cisco Blogs \u200b Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we\u2019re discussing the importance of having comprehensive coverage of MITRE ATT&CK TTPs in security operations, and how Cisco technology can help to achieve this goal. [embedded content] Why MITRE ATT&CK TTPs are relevant to security operations? MITRE ATT&CK is a globally recognized framework that outlines various tactics, techniques, and procedures based on observed behaviors and used by threat actors during a cyberattack. The framework is divided into two main categories: tactics and techniques. Tactics represent the overall goal of an adversary, while techniques represent the specific methods used to achieve that goal. Procedures are the specific steps taken to execute the technique. Why is comprehensive coverage important? The cyberthreat landscape is constantly evolving, and new TTPs are being developed every day. One type of attack that has been gaining popularity is living-off-the-land binary (LOLBin) exploitation. This type of attack has been leveraged by nefarious threat groups such as Volt Typhoon, BlackTech in addition to Jaguar Tooth malware, using legitimate tools and software already present on a victim\u2019s system to carry out malicious activities. These attacks are difficult to detect because they do not involve the use of malware or other malicious software that would be flagged by traditional endpoint security solutions. Instead, attackers use tools such as PowerShell, WMI, and other built-in Windows utilities to achieve their objectives. One way to protect against living off the land attacks recommended by this is to monitor system processes and network activity looking for suspicious behavior. This defense can be done using the combination of endpoint and network security controls and an extended detection and response solution on top to detect and correlate anomalies found in system activities and network traffic patterns, so security teams are timely alerted on potential attacks. By having a comprehensive understanding of the various tactics, techniques, and procedures used by attackers, SOC teams can quickly identify and mitigate any potential threats before they cause significant damage. Cisco Breach Protection Cisco is announcing the launch of Breach Protection to protect against the constantly evolving techniques used by threat actors. Cisco Breach Protection provides a comprehensive understanding of attacks by mapping observed adversary behaviors to MITRE ATT&CK tactics, techniques, and procedures (TTPs) in real-time. Cisco Breach Protection is available in three tiers \u2013 Essentials, Advantage and Premier. Each tier is designed to cater to specific organization needs and delivers a range of outcomes to ensure complete coverage: Breach Protection Essentials covers most attacks that an organization will encounter by combining email, endpoint (EDR), and XDR into a turnkey offer.\u00a0 Most attacks today still leverage a phishing email to deliver malware exploiting an endpoint vulnerability or use an endpoint application (termed living off the land attack) to escalate privileges, establish persistence or traverse laterally.\u00a0 Cisco Breach Protection provides detection and response to these types of attacks and adversaries like Wizard Spider and Sandworm. Breach Protection Advantage covers all the attacks an organization is likely to encounter, especially attacks on very complex environments like IT\/OT\/IIoT or from very sophisticated nation-state threat actors like BlackTech, Volt Typhoon, or Jaguar Tooth.\u00a0 By combing network telemetry and network-based detections from cloud and traditional on-premises infrastructure, only Cisco can cover the full range of attacks seen in the wild today. Breach Protection Premier delivers all the above capabilities to an organization that doesn\u2019t have enough human resources to manage their Security Operations or is looking to fully outsource their SOC operation by wrapping the offer with managed services that delivers an Incident Response retainer, penetration testing services, red\/blue\/purple teaming activities, and managed detection and response. All the above is available to customers who also already have 3rd party security products. The technical outcomes are the same regardless of whether customers choose \u00e0 la carte Cisco products, an EA or the Breach Protection suite.\u00a0 But for customers who choose the suite they can achieve the outcomes listed above at very attractive financial terms and a superior total cost of ownership without having to deal with the challenges of stitching together multiple 3rd party vendors, dealing with multiple 3rd party purchase orders, or managing multiple different consoles. Cisco Breach Protection In today\u2019s evolving cyberthreat landscape, having comprehensive coverage of MITRE ATT&CK TTPs is crucial for SOC teams. It ensures that they are equipped to detect and respond to any potential threat quickly. By analyzing the TTPs used in previous attacks like ransomware, SOC teams can develop a better understanding of the tactics used by threat actors and develop more effective strategies to prevent future attacks. So, if you\u2019re looking to enhance your SOC\u2019s capabilities, make sure you have complete coverage of MITRE ATT&CK TTPs leveraging Cisco Breach Protection! Learn more about Cisco Breach Protection. Explore more blogs on Cisco Security Suites here: The User Protection Suite We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social! Cisco Secure Social Channels InstagramFacebookTwitterLinkedIn Share Share: \u00a0\u00a0Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we\u2019re discussing the importance of having comprehensive coverage of\u00a0\u00a0Read More\u00a0Cisco Blogs\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/\" \/>\n<meta property=\"og:site_name\" content=\"JHC\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-08T23:50:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif\" \/>\n\t<meta property=\"og:image:width\" content=\"1\" \/>\n\t<meta property=\"og:image:height\" content=\"1\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/gif\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm\",\"datePublished\":\"2023-11-08T23:50:00+00:00\",\"dateModified\":\"2023-11-08T23:50:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/\"},\"wordCount\":1007,\"publisher\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif\",\"articleSection\":[\"Cisco: Learning\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/\",\"url\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/\",\"name\":\"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm - JHC\",\"isPartOf\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif\",\"datePublished\":\"2023-11-08T23:50:00+00:00\",\"dateModified\":\"2023-11-08T23:50:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#primaryimage\",\"url\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif\",\"contentUrl\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif\",\"width\":1,\"height\":1},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jacksonholdingcompany.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/#website\",\"url\":\"https:\/\/jacksonholdingcompany.com\/\",\"name\":\"JHC\",\"description\":\"Your Business Is Our Business\",\"publisher\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jacksonholdingcompany.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/#organization\",\"name\":\"JHC\",\"url\":\"https:\/\/jacksonholdingcompany.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/07\/cropped-cropped-jHC-white-500-\u00d7-200-px-1-1.png\",\"contentUrl\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/07\/cropped-cropped-jHC-white-500-\u00d7-200-px-1-1.png\",\"width\":452,\"height\":149,\"caption\":\"JHC\"},\"image\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n","yoast_head_json":{"title":"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm - JHC","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/","og_locale":"en_US","og_type":"article","og_title":"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm","og_description":"Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to\u2026 Read more on Cisco Blogs \u200b Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we\u2019re discussing the importance of having comprehensive coverage of MITRE ATT&CK TTPs in security operations, and how Cisco technology can help to achieve this goal. [embedded content] Why MITRE ATT&CK TTPs are relevant to security operations? MITRE ATT&CK is a globally recognized framework that outlines various tactics, techniques, and procedures based on observed behaviors and used by threat actors during a cyberattack. The framework is divided into two main categories: tactics and techniques. Tactics represent the overall goal of an adversary, while techniques represent the specific methods used to achieve that goal. Procedures are the specific steps taken to execute the technique. Why is comprehensive coverage important? The cyberthreat landscape is constantly evolving, and new TTPs are being developed every day. One type of attack that has been gaining popularity is living-off-the-land binary (LOLBin) exploitation. This type of attack has been leveraged by nefarious threat groups such as Volt Typhoon, BlackTech in addition to Jaguar Tooth malware, using legitimate tools and software already present on a victim\u2019s system to carry out malicious activities. These attacks are difficult to detect because they do not involve the use of malware or other malicious software that would be flagged by traditional endpoint security solutions. Instead, attackers use tools such as PowerShell, WMI, and other built-in Windows utilities to achieve their objectives. One way to protect against living off the land attacks recommended by this is to monitor system processes and network activity looking for suspicious behavior. This defense can be done using the combination of endpoint and network security controls and an extended detection and response solution on top to detect and correlate anomalies found in system activities and network traffic patterns, so security teams are timely alerted on potential attacks. By having a comprehensive understanding of the various tactics, techniques, and procedures used by attackers, SOC teams can quickly identify and mitigate any potential threats before they cause significant damage. Cisco Breach Protection Cisco is announcing the launch of Breach Protection to protect against the constantly evolving techniques used by threat actors. Cisco Breach Protection provides a comprehensive understanding of attacks by mapping observed adversary behaviors to MITRE ATT&CK tactics, techniques, and procedures (TTPs) in real-time. Cisco Breach Protection is available in three tiers \u2013 Essentials, Advantage and Premier. Each tier is designed to cater to specific organization needs and delivers a range of outcomes to ensure complete coverage: Breach Protection Essentials covers most attacks that an organization will encounter by combining email, endpoint (EDR), and XDR into a turnkey offer.\u00a0 Most attacks today still leverage a phishing email to deliver malware exploiting an endpoint vulnerability or use an endpoint application (termed living off the land attack) to escalate privileges, establish persistence or traverse laterally.\u00a0 Cisco Breach Protection provides detection and response to these types of attacks and adversaries like Wizard Spider and Sandworm. Breach Protection Advantage covers all the attacks an organization is likely to encounter, especially attacks on very complex environments like IT\/OT\/IIoT or from very sophisticated nation-state threat actors like BlackTech, Volt Typhoon, or Jaguar Tooth.\u00a0 By combing network telemetry and network-based detections from cloud and traditional on-premises infrastructure, only Cisco can cover the full range of attacks seen in the wild today. Breach Protection Premier delivers all the above capabilities to an organization that doesn\u2019t have enough human resources to manage their Security Operations or is looking to fully outsource their SOC operation by wrapping the offer with managed services that delivers an Incident Response retainer, penetration testing services, red\/blue\/purple teaming activities, and managed detection and response. All the above is available to customers who also already have 3rd party security products. The technical outcomes are the same regardless of whether customers choose \u00e0 la carte Cisco products, an EA or the Breach Protection suite.\u00a0 But for customers who choose the suite they can achieve the outcomes listed above at very attractive financial terms and a superior total cost of ownership without having to deal with the challenges of stitching together multiple 3rd party vendors, dealing with multiple 3rd party purchase orders, or managing multiple different consoles. Cisco Breach Protection In today\u2019s evolving cyberthreat landscape, having comprehensive coverage of MITRE ATT&CK TTPs is crucial for SOC teams. It ensures that they are equipped to detect and respond to any potential threat quickly. By analyzing the TTPs used in previous attacks like ransomware, SOC teams can develop a better understanding of the tactics used by threat actors and develop more effective strategies to prevent future attacks. So, if you\u2019re looking to enhance your SOC\u2019s capabilities, make sure you have complete coverage of MITRE ATT&CK TTPs leveraging Cisco Breach Protection! Learn more about Cisco Breach Protection. Explore more blogs on Cisco Security Suites here: The User Protection Suite We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social! Cisco Secure Social Channels InstagramFacebookTwitterLinkedIn Share Share: \u00a0\u00a0Security Operations Centers (SOC) are responsible for detecting and responding to potential cyber threats in real-time. With the increasing complexity of cyberattacks, it\u2019s important for SOC teams to have comprehensive coverage of MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) tactics, techniques, and procedures (TTPs). Today we\u2019re discussing the importance of having comprehensive coverage of\u00a0\u00a0Read More\u00a0Cisco Blogs\u00a0","og_url":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/","og_site_name":"JHC","article_published_time":"2023-11-08T23:50:00+00:00","og_image":[{"width":1,"height":1,"url":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif","type":"image\/gif"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#article","isPartOf":{"@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/"},"author":{"name":"","@id":""},"headline":"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm","datePublished":"2023-11-08T23:50:00+00:00","dateModified":"2023-11-08T23:50:00+00:00","mainEntityOfPage":{"@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/"},"wordCount":1007,"publisher":{"@id":"https:\/\/jacksonholdingcompany.com\/#organization"},"image":{"@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#primaryimage"},"thumbnailUrl":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif","articleSection":["Cisco: Learning"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/","url":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/","name":"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm - JHC","isPartOf":{"@id":"https:\/\/jacksonholdingcompany.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#primaryimage"},"image":{"@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#primaryimage"},"thumbnailUrl":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif","datePublished":"2023-11-08T23:50:00+00:00","dateModified":"2023-11-08T23:50:00+00:00","breadcrumb":{"@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#primaryimage","url":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif","contentUrl":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/11\/16436449-vPowYY.gif","width":1,"height":1},{"@type":"BreadcrumbList","@id":"https:\/\/jacksonholdingcompany.com\/introducing-cisco-breach-protection-delivering-complete-detection-and-response-of-mitre-attck-ttps-aj-shipley-on-november-8-2023-at-100-pm\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jacksonholdingcompany.com\/"},{"@type":"ListItem","position":2,"name":"Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP\u2019s AJ Shipley on November 8, 2023 at 1:00 pm"}]},{"@type":"WebSite","@id":"https:\/\/jacksonholdingcompany.com\/#website","url":"https:\/\/jacksonholdingcompany.com\/","name":"JHC","description":"Your Business Is Our Business","publisher":{"@id":"https:\/\/jacksonholdingcompany.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jacksonholdingcompany.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jacksonholdingcompany.com\/#organization","name":"JHC","url":"https:\/\/jacksonholdingcompany.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jacksonholdingcompany.com\/#\/schema\/logo\/image\/","url":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/07\/cropped-cropped-jHC-white-500-\u00d7-200-px-1-1.png","contentUrl":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/07\/cropped-cropped-jHC-white-500-\u00d7-200-px-1-1.png","width":452,"height":149,"caption":"JHC"},"image":{"@id":"https:\/\/jacksonholdingcompany.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/posts\/1635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/comments?post=1635"}],"version-history":[{"count":0,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/posts\/1635\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/media\/1636"}],"wp:attachment":[{"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/media?parent=1635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/categories?post=1635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/tags?post=1635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}