>> Welcome to the fourth and final lesson
of Module 2, Attack Navigator.
In this lesson, we will
explore the structure and purpose of
the Attack Navigator and appreciate how
this tool can allow us to create
custom attack visualizations.
Until now, you might have been wondering how I've
made all these awesome attack visualizations.
In this lesson, I'm going to share my secret.
The Attack Navigator is a tool designed to
provide basic navigation and
annotation of attack matrices.
The Attack Navigator allows us
to manipulate the cells in a matrix,
adding color, comments,
assigning numerical values or
capturing into the matrix or notes.
This function is really important,
especially when we think about these quantitative
scorecards from the previous lesson,
as the Attack Navigator allows us to
visualize various matrix such as defensive coverage,
output of red and blue teams,
frequency of detecting techniques,
or any other matrix that we want to capture and present.
Each custom view created
by the navigator is called a layer.
These layers can be created
interactively within the tool or
generated using the custom JSON format for the navigator.
These layers can also be exported
and shared between analysts.
Full source code and documentation for
the navigator are available at
our Attack Navigator GitHub repository.
These instructions include how to stand up and
run your own instance of Navigator,
but we also host one online for everyone to use.
I definitely recommend getting
your own hands-on experience with the Navigator.
Here's a quick introduction to how to
control and use the Navigator tool.
As you can see, the matrix is presented at the bottom,
where you can select each individual cell or technique.
[NOISE] There's also a control panel at the top,
files to perform various other actions,
such as selecting techniques based on
their mappings to groups, software or mitigations.
We can also use these controls to add color or
various other annotations to selected cells.
Once done, we can export these layers into JSON,
Excel, or image formats.
The Attack Navigator allows us to create new layers,
as well as build on or open existing layers.
We can also create layers based on
the various matrices within attack such as enterprise,
mobile or even ICS.
With that little knowledge, check for Lesson 4.
Which of the following is not
true about the Attack Navigator?
Please pause the video and take a second to
think about the correct answer before proceeding.
In this case, the correct answer was A.
Attack Navigator allows us to create
custom visualizations but not edit attack content.
With that, we reach the end of Lesson 4.
In summary, the Attack Navigator enables us to annotate,
save, and share customized views
of attack known as layers.
These layers can capture many types of
data mapped to the techniques within attack.
With that, we've reached the end of Module 2.
In this module, we explore
the various benefits of using attack,
including the diversity of information and
perspective capture within the framework,
the common language for describing
adversary behaviors provided by attack,
and how attack can allow us to create and
produce cybersecurity matrix and scorecards,
very often with the Attack Navigator.