MAD20 MITRE ATT&CK Fundamentals (SF)
About This Course
As cyber adversaries continuously refine their tactics, traditional defenses are often left a step behind. To counter this evolving threat landscape, defenders need more than reactive tools. They need a framework grounded in real-world adversary behavior. The MAD20 MITRE ATT&CK® Fundamentals (SF) course is designed to provide exactly that foundation.
This course introduces cybersecurity professionals to the MITRE ATT&CK® framework, a globally recognized knowledge base of adversary tactics, techniques, and procedures (TTPs). Developed by experts from MITRE, the framework empowers organizations to think like attackers, mapping observed behaviors to structured, actionable intelligence that strengthens both detection and response strategies.
Through interactive lessons and scenario-driven examples, participants will explore how ATT&CK supports operational and strategic decision-making, enables measurable defense improvements, and helps prioritize threats with evidence-based context.
In addition to learning the structure, use cases, and evolution of ATT&CK, learners will gain insight into:
•Applying ATT&CK to assess and improve security posture
•Using ATT&CK for threat modeling and defensive alignment
•Integrating ATT&CK into detection engineering and incident response
Whether you're new to the field or an experienced defender, this course builds the critical thinking and practical knowledge required to leverage ATT&CK as a powerful tool for modern cyber defense.
What You'll Learn
LO1: Use MITRE ATT&CK to retrieve & organize threat data with security protocols, standards and data encryption
LO2: Recognise indicators of attacks during the detection process using indicators of attacks
LO3: Follow-up with relevant parties on security threats/intrusions detected with good understanding of intrusion detection techniques
LO4: Install MITRE ATT&CK appliances for detecting intrusions with good understanding of the types of security threats and intrusions
LO5: Monitor access control mechanisms, network activities and operating systems with knowledge of attack patterns and threat vectors
LO6: Apply ATT&CK to identify anomalous activity and patterns using methods and tools for monitoring network activities, systems and mechanisms
LO7: Interpret information from logs & scanners to detect threats and intrusion attempts by applying MITRE ATT&CK in threat data collection
Entry Requirements
Professional Qualification and Other Diploma
Candidates who do not meet the above requirements will be assessed on case to case basis