What is a MITRE ATT&CK framework?
- a collection of malware exploits and prevention solutions
- a knowledge base of threat actor behavior
- guidelines for the collection of digital evidence
- documented processes and procedures for digital forensic analysis
Explanation: The MITRE framework is a global knowledge base of threat actor behavior. It is based on observation and analysis of real-world exploits with the purpose of describing the behavior of the attacker, not the attack itself. It is designed to enable automated information sharing by defining data structures for the exchange of information between its community of users and MITRE.
Exam with this question: CyberOps Associate (Version 1.0) - Module 28: Digital Forensics and Incident Analysis and Response Answers
Exam with this question: Cyber Threat Management - 6.6.2 Digital Forensics and Incident Analysis and Response Quiz
Exam with this question: Cyber Threat Management: My Knowledge Check Answers
Please login or Register to submit your answer