Attribution Techniques Workshop

Workshop Highlights

1. Introduction to Attribution
   Begin with the basics of cyber attribution, including its importance in the cybersecurity landscape. Learn about the types of data used to trace cyber-attacks, from IP addresses to threat signatures, and how each plays a role in the attribution process.

2. Data Collection and Analysis
   Discover essential tools and techniques for gathering data during and after a cyber-attack. Participants explore methods for capturing forensic evidence, network logs, and indicators of compromise (IOCs) that are key to identifying the attack origin.

3. Understanding Tactics, Techniques, and Procedures (TTPs)
   Gain insight into TTPs commonly used by cyber adversaries. Recognising patterns in TTPs helps security professionals link attack methods to specific threat actors, a critical skill in the attribution process.

4. Using Open-Source Intelligence (OSINT)
   Learn to leverage publicly available information for cyber attribution. OSINT tools are valuable for tracing attacker profiles, identifying geographic sources, and linking attackers to previous incidents.

5. Threat Actor Profiling
   Develop skills in creating attacker profiles based on threat intelligence data. This section covers how to map behavioural patterns, motives, and skill levels to identify likely threat actors or groups.

6. Simulated Attribution Exercises
   Engage in hands-on exercises that allow participants to practise tracing attacks in a controlled environment. Realistic scenarios enable attendees to apply attribution techniques, fostering both skill development and confidence.