WEBVTT

00:00.000 --> 00:01.620
>> In the last few slides,

00:01.620 --> 00:03.090
you learned how to
create and combine

00:03.090 --> 00:04.410
different navigator layers.

00:04.410 --> 00:05.610
Now, you'll get the chance to

00:05.610 --> 00:07.530
apply what you learned
and try on your own.

00:07.530 --> 00:09.820
Let's go ahead and get started.

00:10.010 --> 00:12.945
Our objectives for
this Lesson 3.4,

00:12.945 --> 00:14.520
or to gain hands-on
practice with

00:14.520 --> 00:16.200
defining and comparing layers in

00:16.200 --> 00:18.180
the ATT&CK Navigator
tool and to review

00:18.180 --> 00:19.440
the overlapping techniques and

00:19.440 --> 00:22.360
sub-techniques between
the two different groups.

00:23.990 --> 00:26.520
Before you begin,
please refer to

00:26.520 --> 00:28.605
the resources section
for this exercise.

00:28.605 --> 00:30.330
Once you're ready, you
can get started by

00:30.330 --> 00:32.905
navigating to the following
link on step Number 1.

00:32.905 --> 00:35.100
When you're there, you can
select the techniques for

00:35.100 --> 00:39.280
APT39 and APT32 into
separate navigator layers.

00:39.280 --> 00:41.255
Once you have their
independent layers,

00:41.255 --> 00:42.965
combine them like I
showed you before,

00:42.965 --> 00:44.600
into a third new layer

00:44.600 --> 00:46.490
and give a color and
a score to them.

00:46.490 --> 00:47.750
This will give you a list of

00:47.750 --> 00:50.255
overlapping techniques
for the two APT groups.

00:50.255 --> 00:51.530
We suggest giving yourself

00:51.530 --> 00:55.260
around 15 minutes to perform
this exercise. Good luck.

00:56.090 --> 00:59.675
If you perform the
exercise correctly,

00:59.675 --> 01:01.700
you should now have a
single layer showcasing

01:01.700 --> 01:05.510
the overlapping techniques
between APT39 and APT32.

01:05.510 --> 01:07.700
The overlapping techniques
will be shaded in green

01:07.700 --> 01:10.680
as indicated by the legend
in the bottom right.

01:11.200 --> 01:13.820
We can now take a look
at what are some of

01:13.820 --> 01:15.200
the overlapping techniques and

01:15.200 --> 01:18.480
sub-techniques that you
identified in this exercise.

01:18.910 --> 01:21.110
Now, if you've
finished with creating

01:21.110 --> 01:23.150
your single overlapping
layer navigator,

01:23.150 --> 01:24.410
take a few moments to review

01:24.410 --> 01:25.970
the techniques that we
have here that were

01:25.970 --> 01:27.395
shared between the two groups

01:27.395 --> 01:30.030
that we just did
in the exercise.

01:30.520 --> 01:33.860
To summarize what we
learned in Lesson 3.4,

01:33.860 --> 01:35.630
we worked through the
defining and comparing

01:35.630 --> 01:37.580
layers using ATT&CK
Navigator and we

01:37.580 --> 01:39.590
reviewed the intersection
overlapping techniques

01:39.590 --> 01:42.960
for APT32 and APT39.

01:45.200 --> 01:47.920
Next up we'll be
going to Module 4,

01:47.920 --> 01:49.640
which is making defensive
recommendations

01:49.640 --> 01:51.850
from ATT&CK maps data.

01:51.850 --> 01:53.900
You can now proceed
to that module

01:53.900 --> 01:56.250
as this is the end of Module 3.