This workshop is hosted by EUROCONTROL and organised by practitioners and for practitioners with an interest in the use of the ATT&CK® Framework in Prevention, Detection/Hunting and Response. It will feature updates from the Center For Threat-Informed Defense and from the developers of systems and tools supporting the ATT&CK® Framework. Participants will notably learn best practices from peers in the user community.

The highly-effective format of short (15 minutes) lightning talks will focus on the following themes:

1. Tools and methods for sharing
2. Rules, playbooks and processes
3. ATT&CK® flavours (cloud, telecom, ICS, Active Defence…)