Closing the Gap vs Adversaries With Community Resources
Ian Davila
BSides NYC 2023 (0x04) · Day 1 · Talk - Blue
In this insightful talk from BSides NYC, Ian Davila, Lead Adversary Emulation at Scythe Cyber, delves into the critical importance of **threat-informed defense** and how organizations can leverage readily available community resources to bolster their security posture against evolving threats. Davila, a former member of the MITRE ATT&CK team, highlights the common pitfalls in applying security frameworks and presents a pragmatic approach to understanding and defending against adversary tradecraft. The core message emphasizes moving beyond reactive, signature-based detections to a proactive, behavior-centric strategy, powered by collective intelligence.
AI review
A well-intentioned but fundamentally thin talk that repackages ATT&CK 101 content as a product demo for Scythe's free tier. There's nothing here that a defender couldn't get from reading the ATT&CK website, the Pyramid of Pain blog post, and the Scythe docs in an afternoon.