Adversary Focus: Ransomware Strikes Windows/Linux, DPRK Targets macOS

Enterprise 2024 will incorporate multiple, smaller emulations for a more nuanced and targeted evaluation of defensive capabilities. We’re excited to offer two distinct adversary focus areas: Ransomware targeting Windows and Linux, and the Democratic People's Republic of Korea's (DPRK) targeting macOS.

• Windows (featuring Linux) Emulations
  These emulations will explore common behaviors that are prevalent across prolific ransomware campaigns.

• macOS Emulation
  The macOS emulation will feature adversary behavior inspired by the DPRK’s targeting of macOS via multi-staged and modular malware.

2024 Updates

Enterprise 2024 will feature new insights, with a particular focus on efficiency. This round will also incorporate multiple, smaller emulations, introducing a more nuanced and targeted evaluation of defensive capabilities.

• New! Background Noise
• New! Metrics/Insights (efficiency metrics like false positive rates)
• New! Detection Category Change: Removal of Telemetry
• New! Protections Implementation

Important Dates

• April 30, 2024 - CFP Closes
• Q3 2024 - Evaluation Execution Begins
• Q4 2024 - Evaluation Results Published