NCM Security Central's Security Risk view scores ransomware readiness against guidance from this source, as well as CISA and NIST.
Read more: Nutanix docs
In the Ultra Transcenders books
Each book explains MITRE in context, with comparison tables and the common traps.
Terms in this definition
- NCM Security Central
A SaaS service that shows security and compliance standing for AWS, Azure and Nutanix using more than 800 audit checks. It should not be confused with the Security Dashboard in Prism Central.
- AMPRS
An acronym for availability, manageability, performance, recoverability and security: the five design qualities used to sort non-functional requirements and to weigh up trade-offs between design decisions.
- Risk
As ISO 31000 puts it, how uncertainty affects objectives; that effect can be good or bad.
- View
Shows a system through one chosen group of related concerns. No view is generic; each one is tied to whichever architecture it depicts.
- CISA
One of the sources of security best practice, with NIST and MITRE, used as a benchmark by the Security Risk view in Security Central.
- NIST
National Institute of Standards and Technology (US). Benchmarks based on its SP 800-53 and SP 800-171 can be added to VCF Operations from VMware Marketplace.
Related terms
- AlertInfo
Holds one row per alert from onboarded Sentinel workspaces and the Defender products, giving the alert's severity, category and title, its detection source and mapped MITRE ATT&CK techniques. Combine it with AlertEvidence using AlertId when you need the related entities.
- Bookmark
Lets a threat hunter keep a Microsoft Sentinel query result, along with notes, entity mappings and MITRE ATT&CK tags, then attach it to an existing incident or raise a fresh incident from it.
- indicators of compromise
Legitimate tools whose sudden appearance between restore points triggers an alert. They are listed in SuspiciousFiles.xml, grouped using MITRE ATT&CK, and found using indexing data.
- Threat hunting
Actively looking through security data for signs of attack without waiting to be alerted. In Microsoft Sentinel, analysts run hunting queries linked to MITRE ATT&CK; Defender XDR adds advanced hunting written in KQL, plus custom detection rules.