How does the Diamond Model of intrusion analysis assist cybersecurity analysts?
- by illustrating the tactics, techniques, and procedures (TTP) as part of intrusion defense and attribution
- by illustrating how an adversary pivots from one intrusion event to the next
- by tracing the stages of an intrusion event from the early reconnaissance stages to the exfiltration of data
- by conveying the common attributes and severity of intrusion vulnerabilities in computer hardware and software systems
Explanation:
The Diamond Model is ideal for illustrating how an adversary pivots from one intrusion event to the next. By linking core features like infrastructure and capabilities, analysts can use information discovered in one event to identify the attacker or uncover additional victims
Related exam: Cybersecurity Essentials Course Final Exam Answers
