What information is provided from the MITRE ATT&CK framework in a detection's Execution Details?

The correct answer is C. Technique ID. Technique ID is the information that is provided from the MITRE ATT&CK framework in a detection's Execution Details. Technique ID is a unique identifier for each technique in the MITRE ATT&CK framework, such as T1059 for Command and Scripting Interpreter or T1566 for Phishing…

Threat Intelligence Frameworks

Question

Options

AGrouping Tag
BCommand Line
CTechnique ID
DTriggering Indicator

How the community answered

(45 responses)

A
7% (3)
B
2% (1)
C
89% (40)
D
2% (1)

Explanation

Technique ID is the information that is provided from the MITRE ATT&CK framework in a detection's Execution Details. Technique ID is a unique identifier for each technique in the MITRE ATT&CK framework, such as T1059 for Command and Scripting Interpreter or T1566 for Phishing. Technique ID helps to map a detection to a specific adversary behavior and tactic. Grouping Tag, Command Line, and Triggering Indicator are not information that is provided from the MITRE ATT&CK framework in a detection's Execution Details.

Topics

#MITRE ATT&CK#Technique ID#Falcon detections#execution details

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice