Which of the following is the BEST threat-hunting method for the analyst to use?

A security analyst was transferred to an organization’s threat-hunting team to track specific activity throughout the enterprise environment The analyst must observe and assess the number ot times this activity occurs and aggregate the results.

Which of the following is the BEST threat-hunting method for the analyst to use?
A . Stack counting
B. Searching
C. Clustering
D. Grouping

View Answer

Answer: A

Explanation:

Stack counting is the best threat-hunting method for the analyst to use to observe and assess the number of times a specific activity occurs and aggregate the results. Stack counting is a technique that involves collecting data from multiple sources, such as logs, events, or alerts, and grouping them by a common attribute, such as an IP address, a user name, or a process name. Stack counting can help identify patterns, trends, outliers, or anomalies in the data that may indicate malicious activity or compromise.