Reposted from CISA

The Cybersecurity and Infrastructure Security Agency (CISA) released an Eviction Strategies Tool, a no-cost resource designed to support cyber defenders in their efforts to respond to cyber incidents.
This tool aids cyber responders with the development of customized playbooks aimed at containing and evicting adversaries from compromised systems and networks. It substantially accelerates the creation of tailored response plans and tailored adversary eviction strategies.

The tool includes COUN7ER, a database of atomic post-compromise countermeasures mapped to adversary tactics, techniques, and procedures (TTPs), and Cyber Eviction Strategies Playbook NextGen, a web-based application that matches incident findings with countermeasures obtained from COUN7ER. Together, these resources help defenders build systematic eviction plans with distinct countermeasures to thwart and evict unique intrusions.

 Key features of the Eviction Strategies Tool include:

• Enables cyber defenders to build response plans based on either MITRE ATT&CK® or on free text that describes threat actor activities on compromised assets.
• Exports defensive measure options in numerous formats, such as JSON, Microsoft Word and Excel, and markdown.
• Builds on knowledge from other frameworks, including MITRE D3FEND™, a knowledge graph funded by the National Security Agency, as well as MITRE ATT&CK.
• Contains more than 100 fully developed, researched and curated atomic actions that incident responders can take to contain and evict adversary agency within their networks and assets.

See Original Post