Cloud Analytics

This Cloud Analytics project researched and developed best practices to help defenders improve their ability to detect adversary behaviors in today's complex cloud environments. This repository contains behavioral analytics to detect attacks to cloud platforms and a blueprint for how others can create and use cloud analytics effectively.

Resources

Resource	Description
Blueprint Document	Best practices and lessons learned for developing cloud analytics.​
Analytics	Analytics generated in Sigma format for the project.
CALDERA Emulation Tips	Documentation on reproducing adversary emulation using Caldera.
Sigma Rule Information	Documentation on using Sigma rules in relation to Cloud Analytics.
Support Resources	Resources not part of final deliverable, but potentially useful.

Questions and Feedback

Please submit issues for any technical questions/concerns or contact [email protected] directly for more general inquiries.

Also see the guidance for contributors if are you interested in contributing or simply reporting issues.

Notice

Copyright 2022 MITRE Engenuity. Approved for public release. Document number CT0053

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

This project makes use of ATT&CK®

ATT&CK Terms of Use