Analyzing Your Environment for Potential Pitfalls

This chapter will discuss techniques for critically reviewing your processes, coverage, and systems, and provide advice on potential problem areas. By doing this, you will be able to directly apply it to your environments to look for areas of improvement and avoid any pitfalls, and it will be helpful when looking to implement the ATT&CK framework.

In this chapter, we will cover the following topics:

• Danger! Risks ahead – how to establish a risk registry
• Red and blue make purple – how to run purple team exercises
• Discussing common coverage gaps and security shortfalls