Tactics, Techniques, and Procedures (TTPs) are methods or behaviors utilized by attackers. In which framework are these categorized?

The correct answer is D. MITRE ATT&CK. MITRE ATT&CK is the framework specifically designed to catalog adversary Tactics, Techniques, and Procedures, organizing real-world attacker behaviors into a structured matrix that security teams use for threat detection, red teaming, and gap analysis. The other options are…

Introduction to Cybersecurity and Splunk

Question

Options

ANIST 800-53
BISO 27000
CCIS18
DMITRE ATT&CK

How the community answered

(27 responses)

B
4% (1)
D
96% (26)

Explanation

MITRE ATT&CK is the framework specifically designed to catalog adversary Tactics, Techniques, and Procedures, organizing real-world attacker behaviors into a structured matrix that security teams use for threat detection, red teaming, and gap analysis. The other options are security control or standards frameworks, not behavioral ones: NIST 800-53 defines security and privacy controls for federal information systems, ISO 27000 is a family of information security management standards, and CIS18 (CIS Controls) provides prioritized best-practice security actions for organizations. A helpful memory tip: think ATT&CK = Attacker behavior - the name itself signals that it's about what attackers do, while the distractors are all about what defenders should implement.

Topics

#MITRE ATT&CK#TTPs#threat frameworks#tactics techniques procedures

Community Discussion

No community discussion yet for this question.

Full SPLK-5001 Practice