Exam 312-50v12 topic 1 question 274 discussion

Technical threat intelligence is directly fed into the security devices in digital format to block and identify inbound and outbound malicious traffic entering the organization’s network.

Explanation: Operational threat intelligence: Provides information about specific threats against the organization. It is typically more focused on specific incidents and real-time situations. Strategic threat intelligence: Provides a broader, long-term view of threats and trends. It is often used by senior management to inform policy and strategy. Tactical threat intelligence: Focuses on the tactics, techniques, and procedures (TTPs) used by threat actors. It is generally used for understanding and mitigating specific threats. Technical threat intelligence: Involves technical details about threats, such as indicators of compromise (IOCs) like IP addresses, domain names, file hashes, and malware signatures. This type of intelligence is used to configure security devices to detect and block malicious activities.

CEHv12 - 66

D. Technical threat intelligence

Roma is using Technical threat intelligence to feed information into security devices to identify and block inbound and outbound malicious traffic. Technical threat intelligence typically provides detailed technical information about threats, such as indicators of compromise (IoCs) and specific details about the tactics, techniques, and procedures (TTPs) used by malicious actors.