{"id":6670,"date":"2023-09-22T17:01:53","date_gmt":"2023-09-22T15:01:53","guid":{"rendered":"https:\/\/partnernews.sophos.com\/en-us\/?p=6670"},"modified":"2023-09-22T17:01:53","modified_gmt":"2023-09-22T15:01:53","slug":"results-from-the-2023-mitre-engenuity-attck-evaluations-round-5-turla","status":"publish","type":"post","link":"https:\/\/partnernews.sophos.com\/en-us\/2023\/09\/resources\/results-from-the-2023-mitre-engenuity-attck-evaluations-round-5-turla\/","title":{"rendered":"Results from the 2023 MITRE Engenuity ATT&CK Evaluations (Round 5: Turla)"},"content":{"rendered":"

The fifth round of\u00a0MITRE Engenuity ATT&CK\u00ae<\/sup>\u00a0Evaluations<\/a>\u00a0has been released, assessing the ability of 30 endpoint detection and response (EDR) solutions to detect, analyze, and describe the tactics, techniques and procedures (TTPs) leveraged by one of the most sophisticated threat groups: Turla.<\/p>\n

We\u2019re going to spend most of this article explaining how\u00a0Sophos achieved 99% detection coverage<\/strong>, what contextual information\u00a0Sophos Intercept X<\/strong> presented to the user (in this case, MITRE\u2019s evaluation team), and how ATT&CK Evals can be used to help select an endpoint security solution that aligns with your customers’ specific needs.<\/p>\n

This is to say that we\u2019re not going to assess\u00a0everything\u00a0<\/em>this round of ATT&CK Evals covers because, quite frankly, that would be impossible. Not only do ATT&CK Evals yield a ton of information, but there\u2019s no singular way for interpreting their results; there are no scores, rankings, or ratings, and no vendor is declared a \u201cwinner.\u201d<\/p>\n

There is nuance in the ways each vendor\u2019s tool works and how effectively it presents information to the analyst using it, but needs and individual preferences play as important a role in determining which endpoint security tool is best for your customers and their team as any other factor. If you\u2019ve heard gamers debate which console reigns supreme between PlayStation and Xbox, then you know what we mean (hint: the correct answer is Nintendo).<\/p>\n

How did Sophos perform in the Round 5 MITRE Engenuity ATT&CK Evaluations?<\/h2>\n

This round of ATT&CK Evaluations focused on emulating adversary behavior associated with Russia-based threat group Turla.<\/p>\n