The 2022 MITRE ATT\&CK Report Card highlights CrowdStrike’s performance in the MITRE Engenuity evaluation of Managed Detection and Response services, where Falcon Complete MDR achieved a 99% detection rate by identifying 75 of 76 simulated malicious events. The test emulated attacks by HELIX KITTEN using spear-phishing, persistence tools, credential harvesting, lateral movement, and exfiltration. CrowdStrike mapped all activities to ATT\&CK tactics and provided detailed investigative findings, from initial phishing to data theft via webshells and tunneling. Recommendations stressed phishing-resistant MFA, identity protection, web content restrictions, intrusion prevention, and data loss prevention to counter high-risk tactics.

Join for free to read