Rick Howard is the chief security officer for Palo Alto Networks. Howard suggests that knowledge might be the key to a different way to improve and automate security. Howard: There are less than 100 attacker playbooks in use right now. Adversaries reuse the same attack sequences that worked on previous victims time and again until the network defender community determines how to stop them. If we automatically generate defender playbooks against them, it will be a game changer, Howard says. The Cyber Threat Alliance is trying to get blanket protections for all known adversary playbooks.”]
Source: https://www.csoonline.com/article/3207692/exploit-attacker-playbooks-to-improve-security.html