Câu 83: CS0-002: CompTIA CySA+ Certification Exam (CS0-002)

A security analyst needs to develop a brief that will include the latest incidents and the attack phases of the incidents. The goal is to support threat intelligence and identify whether or not the incidents are linked. Which of the following methods would be MOST appropriate to use?

1. A. The Cyber Kill Chain — đáp án hiện tại
2. B. The MITRE ATT&CK framework
3. C. An adversary capability model
4. D. The Diamond Model of Intrusion Analysis