IBM QRadar

This ATT&CK demo shows how IBM Security's threat management tooling enables organizations to detect, investigate and remediate a real attack, using the latest hacking tools and techniques, perpetrated against an up-to-date Windows 8.1 victim machine.

The demo will illustrate:

• How IBM Security's integrated SIEM and SOAR technology successfully detects phishing involving a real malware site
• A Metasploit module being used in a pass-the-hash attack
• How the User Behavior Analytics (UBA) app automatically dashboarding internal threat
• DNS Tunneling being used for C2 and exfiltration
• How the Watson Advisor app anatomizes the attack and mapping the observed techniques onto the MITRE ATT&CK Framework.