SANS 2022 ATT&CK® & D3FEND™ Report

Incorporating Frameworks into Your Analysis and Intelligence

In this report, SANS looks at two complementary frameworks that security teams should utilize: MITRE ATT&CK® and MITRE D3FEND™. While you’re likely familiar with the ATT&CK® framework, D3FEND™ isn’t as well represented across enterprise security.

This report aims to rectify that. Download the research to learn:

• The strengths of each framework as it pertains to cybersecurity.
• How the frameworks can be used to strengthen incident analysis and response.
• How to incorporate both frameworks into your threat intelligence capabilities.