Which of the following methods would be MOST appropriate to use?

A security analyst needs to develop a brief that will include the latest incidents and the attack phases of the incidents. The goal is to support threat intelligence and identify whether or not the incidents are linked.

Which of the following methods would be MOST appropriate to use?
A . An adversary capability model
B . The MITRE ATT&CK framework
C . The Cyber Kill Chain
D . The Diamond Model of Intrusion Analysis

View Answer

Answer: B