MITRE BASED THREAT DETECTION AND AUTO-FIX

On suspicious action, the safety monitoring system now collects log and notice. Many of them use Siem or SOC setup, but the system requires very infrastructure with trained analysts. These methods often have slow response time; They do not automate and they have limited ability to recommend or use motators. They are also not good for small or offline environments, as they use too much, but also depend on cloud threat information. To fix these problems, this article presents Mitre -based monitoring and an automated defense system. This system maps Mitre ATT&CK techniques for D3fenders in real time. The system is detected as well as similar suspicious events, also suggests and automatically. This provides faster, actively with offline and population protection.