CS0-003 · Question #47
Which of the following would a security analyst most likely use to compare TTPs between different known adversaries of an organization?
The correct answer is A. MITRE ATT&CK. MITRE ATT&CK is a framework and knowledge base that describes the tactics, techniques, and procedures (TTPs) used by various adversaries in cyberattacks. MITRE ATT&CK can help security analysts compare TTPs between different known adversaries of an organization, as well as…
Question
Which of the following would a security analyst most likely use to compare TTPs between different known adversaries of an organization?
Options
- AMITRE ATT&CK
- BCyber Kill Cham
- COWASP
- DSTIX/TAXII
How the community answered
(29 responses)- A86% (25)
- B7% (2)
- C3% (1)
- D3% (1)
Explanation
MITRE ATT&CK is a framework and knowledge base that describes the tactics, techniques, and procedures (TTPs) used by various adversaries in cyberattacks. MITRE ATT&CK can help security analysts compare TTPs between different known adversaries of an organization, as well as identify patterns, gaps, or trends in adversary behavior. MITRE ATT&CK can also help security analysts improve threat detection, analysis, and response capabilities, as well as share threat intelligence with other organizations or communities.
Topics
Community Discussion
No community discussion yet for this question.