CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response
Summary
Hide â˛
Show âŧ
The Cybersecurity and Infrastructure Security Agency (CISA) has released the Eviction Strategies Tool, a free resource designed to assist cyber defenders in responding to cyber incidents. This tool, developed in collaboration with MITRE, enables the creation of tailored response plans and adversary eviction strategies. It includes COUN7ER, a database of atomic post-compromise countermeasures, and Cyber Eviction Strategies Playbook NextGen, a web-based application that matches incident findings with countermeasures. The tool aims to help defenders build systematic eviction plans to thwart and evict unique intrusions. The Eviction Strategies Tool supports cyber defenders in building response plans based on MITRE ATT&CK or free text describing threat actor activities. It exports defensive measures in various formats, including JSON, Microsoft Word, Excel, and markdown. The tool incorporates knowledge from other frameworks, such as MITRE D3FEND, and includes over 100 fully developed, researched, and curated atomic actions for incident responders. CISA encourages public and private sector organizations to integrate this tool into their incident response plans.
Timeline
-
30.07.2025 15:00 đ° 1 articles
CISA Releases Eviction Strategies Tool for Cyber Incident Response
On July 30, 2025, CISA released the Eviction Strategies Tool, a free resource developed in collaboration with MITRE. This tool enables cyber defenders to create tailored response plans and adversary eviction strategies. It includes COUN7ER, a database of atomic post-compromise countermeasures, and Cyber Eviction Strategies Playbook NextGen, a web-based application that matches incident findings with countermeasures. The tool supports various export formats and incorporates knowledge from multiple frameworks, including MITRE D3FEND.
Show sources
- CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response â www.cisa.gov â 30.07.2025 15:00
Information Snippets
-
The Eviction Strategies Tool is designed to support cyber defenders in creating tailored response plans and adversary eviction strategies.
First reported: 30.07.2025 15:00đ° 1 source, 1 articleShow sources
- CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response â www.cisa.gov â 30.07.2025 15:00
-
The tool includes COUN7ER, a database of atomic post-compromise countermeasures mapped to adversary tactics, techniques, and procedures (TTPs).
First reported: 30.07.2025 15:00đ° 1 source, 1 articleShow sources
- CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response â www.cisa.gov â 30.07.2025 15:00
-
Cyber Eviction Strategies Playbook NextGen is a web-based application that matches incident findings with countermeasures from COUN7ER.
First reported: 30.07.2025 15:00đ° 1 source, 1 articleShow sources
- CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response â www.cisa.gov â 30.07.2025 15:00
-
The tool supports the creation of response plans based on MITRE ATT&CK or free text describing threat actor activities.
First reported: 30.07.2025 15:00đ° 1 source, 1 articleShow sources
- CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response â www.cisa.gov â 30.07.2025 15:00
-
Defensive measures can be exported in formats such as JSON, Microsoft Word, Excel, and markdown.
First reported: 30.07.2025 15:00đ° 1 source, 1 articleShow sources
- CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response â www.cisa.gov â 30.07.2025 15:00
-
The tool incorporates knowledge from MITRE D3FEND and includes over 100 atomic actions for incident responders.
First reported: 30.07.2025 15:00đ° 1 source, 1 articleShow sources
- CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response â www.cisa.gov â 30.07.2025 15:00
-
CISA offers the tool under the MIT Open Source License, encouraging public and private sector organizations to integrate it into their incident response plans.
First reported: 30.07.2025 15:00đ° 1 source, 1 articleShow sources
- CISA Releases Open-Source Eviction Strategies Tool for Cyber Incident Response â www.cisa.gov â 30.07.2025 15:00