procedures
What Procedures Actually Represent and Why They Are Critical to Your Defensive Strategy
Most security teams can map an attack to a technique in seconds. Very few can explain exactly how that attack would be executed in their environment ...
From Asset Visibility to Attacker Disruption: Why Knowing What You Have Isn’t Enough
Assets visibility provides awareness of what exists in your defensive stack. It does not determine whether your defenses can actually disrupt an attack. Asset visibility is just an inventory list ...
What We Mean by Procedures (And Why Precision Matters)
Why Terminology Confusion Still Undermines Modern Defense Cybersecurity discussions are filled with familiar language. Security teams talk about the latest threats and threat landscape, attack techniques and behavior, adversary tradecraft, and detection ...
Natural Attack Reading and Comprehension (NARC): A Pillar for Threat-Led Defense
Machines can now read what analysts once had to interpret by hand. Every threat report, DFIR writeup, and red-team finding hides the procedural “how” behind an attack, but extracting that insight at ...
Metrics Every CISO Needs for Threat-Led Defense Success
Security leaders are under increasing pressure to prove that their defenses actually work. Board members and stakeholders want to see measurable progress, yet most metrics available to CISOs today don’t quite fit ...
How Detection Engineers Can Turn Procedures into Actionable Coverage
Detection engineers are at the core of modern security operations and their success depends on knowing what detections to prioritize and how to measure success. But high-level frameworks and disconnected data streams ...
MITRE v18 Update
We are excited to announce that the Tidal Cyber Enterprise and Community Editions are now on the new v18 version of MITRE ATT&CK®! ...
Why Traditional Threat Feeds Miss the Mark: The Role of Procedural Intelligence
Threat intelligence feeds come with a simple promise: Improve operational security by teaching security practitioners what Tactics, Techniques, and Procedures (TTPs) threat actors use in the real world. The more you know ...
Splunk: Cybercriminals Use These Types of TTPs
A report published by Splunk that analyzed three years of data showed a marked increase in the number of cyberattacks that employ four specific types of techniques. Based on analysis of data ...
Why We Should Focus on ‘How,’ not ‘Who,’ of Cyberattacks
Organizations often don’t understand what they need to be protecting themselves from when it comes to costly cyberattacks. The threat landscape is becoming ever more evolved and it’s now rare for a ...
