Building the MITRE ATT&CK Pipeline for Linux

Learn about the development and impact of the linux-malware repository in this 45-minute Security BSides London conference talk. Explore how adversarial behavior on Linux systems extends beyond cryptocurrency mining, examining the evolution of the repository and its contributions to both MITRE and Cisco's understanding of attack patterns over a three-year period. Discover how ATT&CK framework enables effective collaboration between blue and red teams while gaining insights into sophisticated Linux-based threats and attack methodologies.