A threat hunting team receives a report about possible APT activity in the network. Which of the following threat management frameworks should the team implement?
o MITRE ATT&CK is a globally accessible knowledge base that outlines the tactics, techniques, and common knowledge (TTPs) used by cyber attackers. It provides a structured framework for understanding adversary behavior and is widely recognized as the standard for classifying and describing cyberattacks. This makes it ideal for threat hunting teams investigating potential APT activity, as it allows them to map the observed behaviors to specific techniques and tactics within the framework.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Steel16
1 week, 2 days agoBright07
5 months, 2 weeks ago