{"id":130549,"date":"2021-04-21T10:30:41","date_gmt":"2021-04-21T17:30:41","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=130549"},"modified":"2021-06-25T15:25:36","modified_gmt":"2021-06-25T22:25:36","slug":"mitre-round-3-protecting-against-carbanak","status":"publish","type":"post","link":"https:\/\/www2.paloaltonetworks.com\/blog\/2021\/04\/mitre-round-3-protecting-against-carbanak\/","title":{"rendered":"Cortex XDR: Best Combined Prevention and Detection in MITRE Round 3"},"content":{"rendered":"

In the MITRE ATT&CK round 3 evaluation, Cortex XDR delivered 100% threat protection and 97%+ detection visibility. The MITRE ATT&CK evaluations test the detection capabilities of leading security solutions by emulating the real-world attack sequences of the world\u2019s most sophisticated advanced persistent threat (APT) groups.<\/em><\/p>\n

<\/a>Diving Into MITRE ATT&CK Round 3 Results<\/h2>\n

The 2021 MITRE ATT&CK results are out! Yesterday, MITRE Engenuity<\/a> published the third round of the MITRE ATT&CK evaluations, which tested 29 participants\u2019 ability to defend against the tactics, techniques and procedures (TTPs) leveraged by the Carbanak<\/a> and FIN7<\/a> threat groups. We are thrilled to announce that Cortex XDR has once again delivered outstanding results in the face of these advanced threat actors.<\/p>\n

<\/a>MITRE ATT&CK Round 3 Detection Scoring<\/h4>\n

Focused on analyzing how detections occur, rather than assigning scores to vendor capabilities, MITRE categorizes each detection and capture and organizes detections according to each attack technique<\/a>. Techniques may have more than one detection if a security solution detects a technique in different ways. All observed detections are included in the evaluation results.<\/p>\n

<\/a>Results of Cortex XDR Protecting Against Carbanak and FIN7<\/h4>\n
\"Figure<\/span><\/div>
Figure 1. Cortex XDR had the highest combined protection and detection results in the evaluation.
*Note: Data and charts based on MITRE results minus detections with a \u201cConfiguration Change\u201d modifier.<\/figcaption><\/figure>\n

We\u2019re proud to build on our pattern of strong results<\/a>. Highlights of Cortex XDR\u2019s results against TTPs used by Carbanak and FIN7 include:<\/p>\n