Conference Description
Key Takeaways
- Conference organized by the MITRE ATT&CK team focusing on threat-informed defense strategies and real-world framework applications
- Covers collaborative attack modeling, cyber threat intelligence, red teaming, and SOC workflows
- Designed for CISOs, security architects, SOC managers, red team leads, CTI analysts, and security engineers
- Hybrid format with in-person workshops in McLean, VA, and virtual attendance options
- Features the Center for Threat Informed Defense (CTID) and Attack Flow open-source tool
About the Event
ATT&CKcon 7.0 is a cybersecurity conference organized by the MITRE ATT&CK team that brings together practitioners, government officials, researchers, and industry leaders. The event combines expert talks, community-led sessions, and hands-on workshops to advance practical use of the MITRE ATT&CK framework. In-person attendees in McLean, VA, can participate in collaborative workshops, while virtual participants receive unique content tailored to remote attendance.
Key Topics
The conference addresses threat-informed defense, collaborative attack modeling, and cyber threat intelligence. Sessions cover red teaming techniques, security operations center workflows, detection coverage analysis, and response acceleration. Risk communication strategies and practical applications of the ATT&CK framework feature throughout the program. The Center for Threat Informed Defense (CTID) and Attack Flow, an open-source tool for modeling adversary behavior, are highlighted technologies.
Problems Addressed
ATT&CKcon targets common organizational challenges: fragmented cyber defense processes, lack of unified threat modeling approaches, gaps in detection coverage, and difficulty communicating risk effectively to stakeholders. The conference aims to help security teams unify their defense functions and improve coordination between threat intelligence, detection engineering, and incident response.
Who Should Attend
The event serves cybersecurity practitioners from both public and private sectors. Relevant roles include CISOs, security architects, SOC managers and analysts, red team leads, threat intelligence analysts, and security engineers. The “users teaching users” format makes it particularly valuable for those actively implementing or expanding their use of the ATT&CK framework within their organizations.