Viewed
A skill, in practice
MITRE ATT&CK
Explore how I used MITRE ATT&CK through 3 case stories.
Experience at UK Water Utility · Growing MSSP with Offensive Services
All cards in this section are viewed.
UK Water Utility
Turn Red Team findings into engineering priorities
Security Engineering / Detection Use CasesMapped 29 Red Team techniques and signals into 26 prioritised detection, hunting and engineering items, with ATT&CK mappings and telemetry dependencies.
Read the storyGrowing MSSP with Offensive Services
Hands-on application and infrastructure testing
Offensive Security AssessmentI delivered application, Active Directory and infrastructure assessments, with source-code review, simulated phishing and payload work using LOLBins and DLL hijacking.
Read the storyGrowing MSSP with Offensive Services
Scoping assessments around the client's threats
Offensive Scoping & Threat ModellingI scoped external, internal and assumed-breach assessments around attack-surface discovery, Active Directory, email defences and EDR/network visibility, informed by incident-response work.
Read the storyRelated skills
Detection use-case developmentAttack-path analysisTelemetry dependenciesRisk prioritisationDetection feasibilityMDR collaborationWeb application testingActive DirectoryCloud configuration reviewSource-code reviewPhishing simulationPayload developmentLOLBinsDLL hijackingOWASPEngagement scopingThreat modellingAttack-surface assessment