Free Preparation Discussions
MENU
Eccouncil 312-85 Exam - Topic 5 Question 32 Discussion
Topic #: 5
During the process of threat intelligence analysis, John, a threat analyst, successfully extracted an indication of adversary's information, such as Modus operandi, tools, communication channels, and forensics evasion strategies used by adversaries.
Identify the type of threat intelligence analysis is performed by John.
Tactical threat intelligence analysis focuses on the immediate, technical indicators of threats, such as the tactics, techniques, and procedures (TTPs) used by adversaries, their communication channels, the tools and software they utilize, and their strategies for evading forensic analysis. This type of analysis is crucial for operational defenses and is used by security teams to adjust their defenses against current threats. Since John successfully extracted information related to the adversaries' modus operandi, tools, communication channels, and evasion strategies, he is performing tactical threat intelligence analysis. This differs from strategic and operational threat intelligence, which focus on broader trends and specific operations, respectively, and from technical threat intelligence, which deals with technical indicators like malware signatures and IPs. Reference:
'Tactical Cyber Intelligence,' by Cyber Threat Intelligence Network, Inc.
'Intelligence-Driven Incident Response: Outwitting the Adversary,' by Scott J. Roberts and Rebekah Brown
Jerilyn
7 months agoGeorgeanna
7 months agoShantell
7 months agoRyan
8 months agoRebecka
8 months agoMariann
8 months agoTalia
8 months agoSherly
8 months agoRonnie
9 months agoVal
9 months agoFausto
9 months agoLawanda
9 months agoMozell
9 months agoChanel
11 months agoChantell
11 months agoJoana
11 months agoOlene
11 months agoArdella
11 months agoPage
10 months agoJeanice
11 months agoEvangelina
11 months agoDaren
11 months agoValentine
12 months agoHillary
12 months agoAfton
11 months agoQuentin
11 months ago