mirror of https://github.com/MISP/misp-training
chg: [attack] conversion added
parent
b905044344
commit
01aec94990
|
@ -54,6 +54,25 @@
|
|||
\end{itemize}
|
||||
\end{frame}
|
||||
|
||||
\begin{frame}
|
||||
\frametitle{Conversion (or the Dirty Part)}
|
||||
\begin{itemize}
|
||||
\item Understand the topic.
|
||||
\item Understand the users and their use cases.
|
||||
\item Map to Matrix / Kill Chain.
|
||||
\item Handle \textbf{various formats}:
|
||||
\begin{itemize}
|
||||
\item JSON, XLS, PDF, DOCX, Markdown, CSV, web scraping, Python, etc.
|
||||
\end{itemize}
|
||||
\item Reverse engineer the data model.
|
||||
\item Manage UUIDs: existing vs. generating new.
|
||||
\item Handle duplicate values\footnote{In other words, many organizations didn’t machine-validate their own model.}:
|
||||
\begin{itemize}
|
||||
\item Interaction with the framework owner.
|
||||
\end{itemize}
|
||||
\item Create the conversion script.
|
||||
\end{itemize}
|
||||
\end{frame}
|
||||
|
||||
|
||||
\begin{frame}
|
||||
|
|
Binary file not shown.
Loading…
Reference in New Issue