Common Mistakes with Implementation
Mistakes happen; that’s just a part of life. This chapter will provide an overview of common mistakes I have made in mappings and detections, as well as areas where I’ve seen others make mistakes. That way, you can learn from our shortcomings and implement mappings the right way.
The chapter will cover the following topics:
- Examples of incorrect technique mappings from ATT&CK
- Examples of poor executions with detection creation