CTI from zero to hero

Let's test your ability to find the right answer

• 1+1=3

• $x^3\cdot x^3=x^9$

• false

• CTI=Cyber Threat Intelligence

Which is the best background for a CTI talk?

• 
• 
• 
• 

What makes something a threat?

• Capability, Opportunity and Intent

• Capability, Infrastructure and Opportunity

• Loss of Confidentiality, Availability and Integrity

Is there any platform or tool we can get to create threat intelligence?

• A decompiler

• A Threat Intelligence Platform

• A Malware Information Sharing Platform

• No, there isn't

Which are the five phases of the Cyber Threat Intelligence Cycle?

• Planning & Direction, collection&processing, exploitation& analysis, dissemination&feedback

• collection&processing, exploitation& analysis, dissemination&feedback

• Planning & Direction, collection, processing&exploitation, analysis&production, dissemination&feedback

• Planning & Direction, collection&processing, exploitation, analysis&production, dissemination&feedback

Which are the core features of an intrusion event

• Adversary, TTPs, Capabilities, Victim

• Adversary, Infrastructure, Capabilities, Victim

• Adversary, motivation, intent, opportunity

If a RAT running on a compromised host is discovered, in which phase of the killchain should we report this event?

• Reconnaissance

• Installation

• C2

• Action on Objectives

Organizing your data by considering both the diamond model and the killchain, how many buckets you will get?

• 32

• 28

• 36

• 24

Which vertices of diamond model you would consider trying to answer to the following information requirement: Is our organization a possible target of actor X?

• Adversary

• Victim

• Infrastructure

• Capabilities

Which vertices of diamond model you would consider trying to answer to the following information requirement: Which are the attackers we should take care of?

• Adversary

• Victim

• Infrastructure

• Capabilities