The main objective of the project is to investigate methods, approaches, and tools for the effective detection of advanced cyberattacks employing specific adversarial tactics—namely exploitation, lateral movement, and privilege escalation—in accordance with the MITRE ATT&CK framework. Particular emphasis is placed on identifying the limitations of selected detection methods and proposing improvements to enhance their accuracy and efficiency in real-world operational environments.

The project focuses on the systematic examination of techniques, sub-techniques, and procedures (TTPs) used within these attack tactics, the identification of their distinguishing characteristics, the analysis of existing detection approaches, and the formulation of recommendations aimed at improving the accuracy, efficiency, and adaptability of detection mechanisms across diverse operational environments.