CS0-003 · Question #130
A security analyst was transferred to an organization's threat-hunting team to track specific activity throughout the enterprise environment. The analyst must observe and assess the number to times th
The correct answer is A. Stack counting. Stack counting is a threat-hunting technique that involves monitoring a specific event or activity, counting the number of times it occurs, and then aggregating those results over time. This technique is useful for identifying patterns of behavior that may indicate a threat actor
Question
A security analyst was transferred to an organization's threat-hunting team to track specific activity throughout the enterprise environment. The analyst must observe and assess the number to times this activity occurs and aggregate the results. Which of the following is the BEST threat-hunting method for the analyst to use?
Options
- AStack counting
- BSearching
- CClustering
- DGrouping
How the community answered
(16 responses)- A88% (14)
- B6% (1)
- D6% (1)
Explanation
Stack counting is a threat-hunting technique that involves monitoring a specific event or activity, counting the number of times it occurs, and then aggregating those results over time. This technique is useful for identifying patterns of behavior that may indicate a threat actor is active in the environment.
Topics
Community Discussion
No community discussion yet for this question.