Free Preparation Discussions
MENU
Eccouncil 312-85 Exam - Topic 5 Question 32 Discussion
Topic #: 5
During the process of threat intelligence analysis, John, a threat analyst, successfully extracted an indication of adversary's information, such as Modus operandi, tools, communication channels, and forensics evasion strategies used by adversaries.
Identify the type of threat intelligence analysis is performed by John.
Tactical threat intelligence analysis focuses on the immediate, technical indicators of threats, such as the tactics, techniques, and procedures (TTPs) used by adversaries, their communication channels, the tools and software they utilize, and their strategies for evading forensic analysis. This type of analysis is crucial for operational defenses and is used by security teams to adjust their defenses against current threats. Since John successfully extracted information related to the adversaries' modus operandi, tools, communication channels, and evasion strategies, he is performing tactical threat intelligence analysis. This differs from strategic and operational threat intelligence, which focus on broader trends and specific operations, respectively, and from technical threat intelligence, which deals with technical indicators like malware signatures and IPs. Reference:
'Tactical Cyber Intelligence,' by Cyber Threat Intelligence Network, Inc.
'Intelligence-Driven Incident Response: Outwitting the Adversary,' by Scott J. Roberts and Rebekah Brown
Jerilyn
2 months agoGeorgeanna
2 months agoShantell
3 months agoRyan
3 months agoRebecka
3 months agoMariann
3 months agoTalia
4 months agoSherly
4 months agoRonnie
4 months agoVal
4 months agoFausto
4 months agoLawanda
5 months agoMozell
5 months agoChanel
7 months agoChantell
7 months agoJoana
7 months agoOlene
7 months agoArdella
7 months agoPage
5 months agoJeanice
6 months agoEvangelina
6 months agoDaren
7 months agoValentine
7 months agoHillary
7 months agoAfton
6 months agoQuentin
7 months ago