{"id":53792,"date":"2023-09-21T00:00:00","date_gmt":"2023-09-21T00:00:00","guid":{"rendered":"urn:uuid:8ddbb99f-2a9a-7dcc-1f84-990236c15103"},"modified":"2023-09-21T00:00:00","modified_gmt":"2023-09-21T00:00:00","slug":"decoding-turla-trend-micros-mitre-performance","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/decoding-turla-trend-micros-mitre-performance\/","title":{"rendered":"Decoding Turla: Trend Micro’s MITRE Performance"},"content":{"rendered":"

<\/p>\n

<\/div>\n

As adversaries continue to innovate and find creative and increasingly aggressive techniques, it is critical organizations have the necessary protection, visibility, and detection capabilities to effectively thwart breach attempts, while maintaining business operations.<\/p>\n

The MITRE ATT&CK framework provides a common language for security practitioners to understand, visualize, and respond to the adversarial tactics, techniques, and procedures (TTPs) found in their environment. This year, the MITRE Engenuity ATT&CK evaluation tested cybersecurity vendors against simulated attack scenarios mimicking the adversary group \u201cTurla.\u201d<\/p>\n

Performance<\/span><\/p>\n

Trend Micro\u2019s 100% successful protection performance in this year\u2019s evaluation represents our commitment and investment in modern, proactive preventative controls. Trend\u2019s protection results reflect and reinforce our achievements and consistently validated leadership in the endpoint protection, EDR, and XDR categories.<\/p>\n

When it came to visibility and analytics, Trend showed strong coverage across the MITRE ATT&CK Matrix and successfully detected all the necessary steps to alert, respond, and contain an attack before it could progress to a full breach. Trend\u2019s platform-approach was particularly effective in surfacing high-fidelity detection alerts in early- and mid-chain tactics, ensuring agile and decisive counteractions to threat actors.<\/p>\n

Today, security and SOC teams are inundated with an overwhelming volume of detection alerts and noise. Our visibility and analytics performance represents a finely tuned balance between managing alert fatigue and analyst experience by alerting on early and critical adversarial tactics and techniques. This balance ensures threat activity is contained at the first opportunity with greater prioritization and without noise. In each simulation, there was no scenario where Turla attack attempts successfully breached the environment without either being detected or disrupted.<\/p>\n