Hello,
I'm Aaron Rosenmund, and welcome to Pluralsight and this course on leveraging
Blue Team tools to defend against adversaries using MITRE techniques as a
guideline. This course serves as the introduction to the Blue Team tools path
and how to integrate those tools into your overall enterprise security strategy
from risk management to hands‑on keyboard implementation with a focus on your
specific business case.
Regardless of the role that you fill with in security operations,
you need tools to do your job.
Enterprise tools are incredibly useful, but like large ships,
they take a lot of time and money and contracts to
pivot quickly to changing threats.
Also,
consider that any sufficiently advanced adversary is going to
check their attacks against market leading solutions before
launching them against targets.
So how do we solve this problem?
Enter open source Blue Team tools.
These tools can be found throughout enterprises,
filling gaps in security and providing advanced defensive
capabilities to keep pace with the ever‑changing threat.
I'm sure you have some questions, how do enterprises effectively
leverage open source tools to mitigate advanced risk, how do you relate
that decision to management, and most of all,
how can you make an informed decision about what technical
defensive capabilities you need for analysis,
detection, and inspection of cybersecurity data to stay ahead of threats.
I'm looking forward to answering all of these questions and more
in this course, BlueTeam Tools: Defense Against Adversary
Activity Using MITRE ATT&CK Techniques.