# Essential MITRE ATT&CK Framework Resources and Free Courses

[MITRE ATT&CK](https://attack.mitre.org/) is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations.

[MITRE Attack Navigator](https://mitre-attack.github.io/attack-navigator/) is a web-based tool for annotating and exploring ATT&CK matrices. It can be used to visualize defensive coverage, red/blue team planning, the frequency of detected techniques, and more.

[The MITRE Cyber Analytics Repository (CAR)](https://car.mitre.org/) is a collection of analytics for detecting adversary behaviors based on the MITRE ATT&CK model. CAR provides pseudocode and code implementations for various tools (e.g., Splunk, EQL) and data sources. CAR also defines a data model and a sensor framework for observable data.

> Search [Katie Nickels](https://twitter.com/likethecoins) on google. Everything she shared on Cyber Threat Intelligence (CTI) is valuable.
> 
> She is the Director of Intelligence at Red Canary and a Nonresident Senior Fellow at the Atlantic Council. She has worked on cyber threat intelligence (CTI), network defense, and incident response for nearly a decade for the U.S. Department of Defense (DoD), MITRE, Raytheon, and ManTech.

# FREE Certification Courses

## **Picus Security**

Link: [academy.picussecurity.com](https://academy.picussecurity.com/courses)

[![](https://substackcdn.com/image/fetch/w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F4ab64b50-a52d-4c74-8718-3dacd802bc43_966x878.png align="left")](https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F4ab64b50-a52d-4c74-8718-3dacd802bc43_966x878.png)

## **AttackIQ**

Link: [academy.attackiq.com](https://www.academy.attackiq.com/catalog?s=mitre)

[![](https://substackcdn.com/image/fetch/w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fbeb0f0a6-fe9a-4321-8728-82e060379d3e_1258x677.png align="left")](https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fbeb0f0a6-fe9a-4321-8728-82e060379d3e_1258x677.png)

## **Cybrary**

Link: [www.cybrary.it](https://www.cybrary.it/catalog/refined/?q=mitre&view=course)

[![](https://substackcdn.com/image/fetch/w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F142dcb12-69bc-4f54-819e-327a52a970a3_1092x959.png align="left")](https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F142dcb12-69bc-4f54-819e-327a52a970a3_1092x959.png)

## MITRE ATT&CK Defender (MAD)

MAD is a *training* and *credentialing* program for cybersecurity operations and individuals looking to strengthen their threat-informed defense approach to security. This is the official website for *MITRE ATT&CK Certification exam*.

Link: [mad.mitre-engenuity.org](https://mad.mitre-engenuity.org/)

[![](https://substackcdn.com/image/fetch/w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F99a987a8-7edd-4677-9253-3e078e968942_1376x843.png align="left")](https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F99a987a8-7edd-4677-9253-3e078e968942_1376x843.png)

# Miscellaneous

* Suggested video on [MITRE ATT&CK Fundamentals](https://www.youtube.com/watch?v=1cCt2XZr2ms&t=696s).
    
* [TTP based Threat Hunting](https://www.mitre.org/sites/default/files/2021-11/prs-19-3892-ttp-based-hunting.pdf) (PDF).
    
* [MITRE ATT&CK for Dummies](https://www.attackiq.com/lp/mitre-attack-for-dummies/) (PDF).