ATT&CK® Cyber Threat Intelligence Certification Path

MITRE ATT&CK® subject matter experts continuously develop the training and mastery assessment built for the ATT&CK® Fundamentals Badge. Their focus is to validate a defender's ability to understand the ATT&CK framework (the data along with the philosophy that has shaped ATT&CK) as well as recognize how ATT&CK can be applied to operational challenges/opportunities. The ATT&CK® Fundamentals Badge validates that a defender: • Understands what knowledge is and isn't captured within ATT&CK • Understands how and why ATT&CK evolves • Can manipulate and extend ATT&CK to meet tailored needs Meet the training and mastery assessment author: Jamie Williams Lead Cyber Adversarial Engineer at MITRE Jamie Williams is a Cyber Adversarial Engineer for the MITRE Corporation. He works on various exciting efforts involving security operations and research, specializing in adversary emulation and behavior-based detections. He also leads teams that help shape and deliver the "adversary-touch" within ATT&CK® and ATT&CK Evaluations. Before joining MITRE, Jamie received his M.S. in Information Systems Engineering from Johns Hopkins University and his B.S. in Information Systems from the University of Maryland, Baltimore County (UMBC). Steve Luke Director of Content MITRE ATT&CK Defender ™ Steve Luke is the Director of Content for MITRE ATT&CK Defender™. He’s dedicated to empowering organizations with more effective ways to robustly detect and respond to cyber-attacks. Since 2007, Steve has focused on delivering innovative solutions to cyber missions, with a special focus on ATT&CK® and its application to hunting. Steve co-authored a paper on TTP-Based Hunting, developed and delivered educational materials about that methodology, and leads purple teaming events to explore ATT&CK techniques and develop robust analytic approaches to detect them. Steve earned a B.S. and Masters of Engineering in Electrical Engineering from Cornell University with a focus on digital signal processing. Prior to joining MITRE in 2005, he served as an officer in the United States Air Force.

MITRE ATT&CK® subject matter experts develop the training and mastery assessment built for the ATT&CK® Cyber Threat Intelligence(CTI) from Raw Data Badge. The focus is to validate: • Mastery of mapping raw data and translating behaviors seen on a system or in raw data into TTPs Meet the training and mastery assessment authors: Amy L. Robertson Senior Cybersecurity Engineer at MITRE Amy Robertson is a Senior Cybersecurity Engineer for the MITRE corporation with over a decade of experience mitigating national security cyber risk. Amy provides cyber threat intelligence support to a number of mission spaces, including space assets and weapons systems. Before joining MITRE, Amy led the Department of Homeland Security's NCCIC Strategic Communications team and supported international cyber collaboration and capacity-building programs across Europe and Central Asia. Amy's experience extends into the private sector, where she managed cyber risk assessments and Cyber-OSINT & SOCMINT investigations for critical infrastructure portfolios. Ms. Robertson received a B.A in Social Science and History from Thomas Edison State College. She graduated Magna Cum Laude from Johns Hopkins University with an M.A. in Global Security Studies. Jackie Lasky Senior Cybersecurity Engineer at MITRE ATT&CK® Cyber Threat Intelligence Analyst Jackie Lasky is a Senior Cybersecurity Engineer and ATT&CK® Cyber Threat Intelligence Analyst for the MITRE Corporation. She's been a member of the MITRE ATT&CK® team for three years and is currently involved in various efforts involving data analytics, machine learning, and CTI for ATT&CK®. Jackie holds a B.S. in Computer Science from George Mason University and is currently working on her M.S. in Analytics at the Georgia Institute of Technology. Steve Luke Director of Content MITRE ATT&CK Defender ™ Steve Luke is the Director of Content for MITRE ATT&CK Defender™. He’s dedicated to empowering organizations with more effective ways to robustly detect and respond to cyber-attacks. Since 2007, Steve has focused on delivering innovative solutions to cyber missions, with a special focus on ATT&CK® and its application to hunting. Steve co-authored a paper on TTP-Based Hunting, developed and delivered educational materials about that methodology, and leads purple teaming events to explore ATT&CK techniques and develop robust analytic approaches to detect them. Steve earned a B.S. and Masters of Engineering in Electrical Engineering from Cornell University with a focus on digital signal processing. Prior to joining MITRE in 2005, he served as an officer in the United States Air Force. To consider before attempting to earn the badge: • Have a solid understanding of the ATT&CK Framework • Understand security concepts or have prior CTI field experience • Complete the ATT&CK Cyber Threat Intelligence course

MITRE ATT&CK® subject matter experts develop the training and mastery assessment built for the ATT&CK® Cyber Threat Intelligence(CTI) from Narrative Reporting Badge. The focus is to validate: • Mastery in applying ATT&CK in mapping a threat report • Mastery in looking for ATT&CK tactics, then techniques and extracting those from a finished threat report Meet the training and mastery assessment authors: Amy L. Robertson Senior Cybersecurity Engineer at MITRE Amy Robertson is a Senior Cybersecurity Engineer for the MITRE corporation with over a decade of experience mitigating national security cyber risk. Amy provides cyber threat intelligence support to a number of mission spaces, including space assets and weapons systems. Before joining MITRE, Amy led the Department of Homeland Security's NCCIC Strategic Communications team and supported international cyber collaboration and capacity-building programs across Europe and Central Asia. Amy's experience extends into the private sector, where she managed cyber risk assessments and Cyber-OSINT & SOCMINT investigations for critical infrastructure portfolios. Ms. Robertson received a B.A in Social Science and History from Thomas Edison State College. She graduated Magna Cum Laude from Johns Hopkins University with an M.A. in Global Security Studies. Jackie Lasky Senior Cybersecurity Engineer at MITRE ATT&CK® Cyber Threat Intelligence Analyst Jackie Lasky is a Senior Cybersecurity Engineer and ATT&CK® Cyber Threat Intelligence Analyst for the MITRE Corporation. She's been a member of the MITRE ATT&CK® team for three years and is currently involved in various efforts involving data analytics, machine learning, and CTI for ATT&CK®. Jackie holds a B.S. in Computer Science from George Mason University and is currently working on her M.S. in Analytics at the Georgia Institute of Technology. Steve Luke Director of Content MITRE ATT&CK Defender ™ Steve Luke is the Director of Content for MITRE ATT&CK Defender™. He’s dedicated to empowering organizations with more effective ways to robustly detect and respond to cyber-attacks. Since 2007, Steve has focused on delivering innovative solutions to cyber missions, with a special focus on ATT&CK® and its application to hunting. Steve co-authored a paper on TTP-Based Hunting, developed and delivered educational materials about that methodology, and leads purple teaming events to explore ATT&CK techniques and develop robust analytic approaches to detect them. Steve earned a B.S. and Masters of Engineering in Electrical Engineering from Cornell University with a focus on digital signal processing. Prior to joining MITRE in 2005, he served as an officer in the United States Air Force. To consider before attempting to earn the badge: • Have a solid understanding of the ATT&CK Framework • Understand security concepts or have prior CTI field experience • Complete the ATT&CK Cyber Threat Intelligence course

MITRE ATT&CK® subject matter experts develop the training and mastery assessment for the ATT&CK® Cyber Threat Intelligence(CTI) Storage and Analysis Badge. The focus is to validate: • Mastery in creating layers in ATT&CK Navigator • Mastery in producing heatmaps and sharing coverage of specific TTPs, adversary groups, and more. • Mastery in comparing layers by looking at two different APT groups or software and finding overlapping techniques between them. Meet the training and mastery assessment authors: Amy L. Robertson Senior Cybersecurity Engineer at MITRE Amy Robertson is a Senior Cybersecurity Engineer for the MITRE corporation with over a decade of experience mitigating national security cyber risk. Amy provides cyber threat intelligence support to a number of mission spaces, including space assets and weapons systems. Before joining MITRE, Amy led the Department of Homeland Security's NCCIC Strategic Communications team and supported international cyber collaboration and capacity-building programs across Europe and Central Asia. Amy's experience extends into the private sector, where she managed cyber risk assessments and Cyber-OSINT & SOCMINT investigations for critical infrastructure portfolios. Ms. Robertson received a B.A in Social Science and History from Thomas Edison State College. She graduated Magna Cum Laude from Johns Hopkins University with an M.A. in Global Security Studies. Jackie Lasky Senior Cybersecurity Engineer at MITRE ATT&CK® Cyber Threat Intelligence Analyst Jackie Lasky is a Senior Cybersecurity Engineer and ATT&CK® Cyber Threat Intelligence Analyst for the MITRE Corporation. She's been a member of the MITRE ATT&CK® team for three years and is currently involved in various efforts involving data analytics, machine learning, and CTI for ATT&CK®. Jackie holds a B.S. in Computer Science from George Mason University and is currently working on her M.S. in Analytics at the Georgia Institute of Technology. Steve Luke Director of Content MITRE ATT&CK Defender ™ Steve Luke is the Director of Content for MITRE ATT&CK Defender™. He’s dedicated to empowering organizations with more effective ways to robustly detect and respond to cyber-attacks. Since 2007, Steve has focused on delivering innovative solutions to cyber missions, with a special focus on ATT&CK® and its application to hunting. Steve co-authored a paper on TTP-Based Hunting, developed and delivered educational materials about that methodology, and leads purple teaming events to explore ATT&CK techniques and develop robust analytic approaches to detect them. Steve earned a B.S. and Masters of Engineering in Electrical Engineering from Cornell University with a focus on digital signal processing. Prior to joining MITRE in 2005, he served as an officer in the United States Air Force. Jackie Lasky is a Sr. Cybersecurity Engineer and ATT&CK CTI Analyst at MITRE. She is one of the authors of the ATT&CK Cyber Threat Intelligence Certification and worked on building the mastery assessments that allow for defenders to prove mastery of applying ATT&CK for CTI. She’s been a member of the MITRE ATT&CK® team for three years and is currently involved in various efforts involving data analytics, machine learning, and CTI for ATT&CK. To consider before attempting to earn the badge: • Have a solid understanding of the ATT&CK Framework • Understand security concepts or have prior CTI field experience • Complete the ATT&CK Cyber Threat Intelligence course

The ATT&CK Cyber Threat Intelligence Defense Recommendations badge validates a defender’s mastery of using ATT&CK mapped data to make defensive recommendations for an enterprise. The focus is to validate: • Mastery in how the defensive recommendation process works • Mastery in how techniques and sub-techniques are used in ATT&CK CTI • Proficiency in understanding constraints and tradeoffs within organizations Meet the training and mastery assessment authors: Amy L. Robertson Senior Cybersecurity Engineer at MITRE Amy Robertson is a Senior Cybersecurity Engineer for the MITRE corporation with over a decade of experience mitigating national security cyber risk. Amy provides cyber threat intelligence support to a number of mission spaces, including space assets and weapons systems. Before joining MITRE, Amy led the Department of Homeland Security's NCCIC Strategic Communications team and supported international cyber collaboration and capacity-building programs across Europe and Central Asia. Amy's experience extends into the private sector, where she managed cyber risk assessments and Cyber-OSINT & SOCMINT investigations for critical infrastructure portfolios. Ms. Robertson received a B.A in Social Science and History from Thomas Edison State College. She graduated Magna Cum Laude from Johns Hopkins University with an M.A. in Global Security Studies. Jackie Lasky Senior Cybersecurity Engineer at MITRE ATT&CK® Cyber Threat Intelligence Analyst Jackie Lasky is a Senior Cybersecurity Engineer and ATT&CK® Cyber Threat Intelligence Analyst for the MITRE Corporation. She's been a member of the MITRE ATT&CK® team for three years and is currently involved in various efforts involving data analytics, machine learning, and CTI for ATT&CK®. Jackie holds a B.S. in Computer Science from George Mason University and is currently working on her M.S. in Analytics at the Georgia Institute of Technology. Steve Luke Director of Content MITRE ATT&CK Defender ™ Steve Luke is the Director of Content for MITRE ATT&CK Defender™. He’s dedicated to empowering organizations with more effective ways to robustly detect and respond to cyber-attacks. Since 2007, Steve has focused on delivering innovative solutions to cyber missions, with a special focus on ATT&CK® and its application to hunting. Steve co-authored a paper on TTP-Based Hunting, developed and delivered educational materials about that methodology, and leads purple teaming events to explore ATT&CK techniques and develop robust analytic approaches to detect them. Steve earned a B.S. and Masters of Engineering in Electrical Engineering from Cornell University with a focus on digital signal processing. Prior to joining MITRE in 2005, he served as an officer in the United States Air Force. To consider before attempting to earn the badge: • Have a solid understanding of the ATT&CK Framework • Understand security concepts or have prior CTI field experience • Complete the ATT&CK Cyber Threat Intelligence course

The MITRE ATT&CK® Cyber Threat Intelligence (CTI) Certification validates a defender's mastery in identifying, developing, analyzing, and applying ATT&CK-mapped intelligence. A certified ATT&CK defender earned five distinct badges to achieve the ATT&CK for Cyber Threat Intelligence Certification: • ATT&CK® Fundamentals • ATT&CK® Cyber Threat Intelligence from Raw Data Badge • ATT&CK® Cyber Threat Intelligence from Narrative Reporting Badge • ATT&CK® Cyber Threat Intelligence Storage and Analysis Badge • ATT&CK® Cyber Threat Intelligence Defense Recommendations Badge Meet the training and mastery assessment authors: Amy L. Robertson Senior Cybersecurity Engineer at MITRE Amy Robertson is a Senior Cybersecurity Engineer for the MITRE corporation with over a decade of experience mitigating national security cyber risk. Amy provides cyber threat intelligence support to a number of mission spaces, including space assets and weapons systems. Before joining MITRE, Amy led the Department of Homeland Security's NCCIC Strategic Communications team and supported international cyber collaboration and capacity-building programs across Europe and Central Asia. Amy's experience extends into the private sector, where she managed cyber risk assessments and Cyber-OSINT & SOCMINT investigations for critical infrastructure portfolios. Ms. Robertson received a B.A in Social Science and History from Thomas Edison State College. She graduated Magna Cum Laude from Johns Hopkins University with an M.A. in Global Security Studies. Jackie Lasky Senior Cybersecurity Engineer at MITRE ATT&CK® Cyber Threat Intelligence Analyst Jackie Lasky is a Senior Cybersecurity Engineer and ATT&CK® Cyber Threat Intelligence Analyst for the MITRE Corporation. She's been a member of the MITRE ATT&CK® team for three years and is currently involved in various efforts involving data analytics, machine learning, and CTI for ATT&CK®. Jackie holds a B.S. in Computer Science from George Mason University and is currently working on her M.S. in Analytics at the Georgia Institute of Technology. Jamie Williams Lead Cyber Adversarial Engineer at MITRE Jamie Williams is a Cyber Adversarial Engineer for the MITRE Corporation. He works on various exciting efforts involving security operations and research, specializing in adversary emulation and behavior-based detections. He also leads teams that help shape and deliver the "adversary-touch" within ATT&CK® and ATT&CK Evaluations. Before joining MITRE, Jamie received his M.S. in Information Systems Engineering from Johns Hopkins University and his B.S. in Information Systems from the University of Maryland, Baltimore County (UMBC). Steve Luke Director of Content MITRE ATT&CK Defender ™ Steve Luke is the Director of Content for MITRE ATT&CK Defender™. He’s dedicated to empowering organizations with more effective ways to robustly detect and respond to cyber-attacks. Since 2007, Steve has focused on delivering innovative solutions to cyber missions, with a special focus on ATT&CK® and its application to hunting. Steve co-authored a paper on TTP-Based Hunting, developed and delivered educational materials about that methodology, and leads purple teaming events to explore ATT&CK techniques and develop robust analytic approaches to detect them. Steve earned a B.S. and Masters of Engineering in Electrical Engineering from Cornell University with a focus on digital signal processing. Prior to joining MITRE in 2005, he served as an officer in the United States Air Force. To consider before attempting to earn the certification: • Have a solid understanding of the ATT&CK Framework • Understand security concepts, or have prior CTI field experience • Complete the ATT&CK Cyber Threat Intelligence course