CYSA day 2

Website to analyze TTPs

• OWASP

• ATT&CK

• ESPN

• Nist

Publicly available info

• OSINT

• DOD

• POLP

• NIST

Type of threat that has user account in your network

• Outsider

• Nation state

• APT

• Insider

What does IoC stand for

• Indicator of coolness

• Indicator of calamity

• Indicator of compromise

• Indicator of centralization

Proactive stance for security investigations

• Threat analysis

• Threat modeling

• Threat hunting

• Treat hunting

First step in threat hunting

• Threat role playing

• Hypertension

• Hypnosis

• Hypothesis

Control type a SIEM belongs too

• Detective

• Preventive

• corrective

• administrative

What skill does cybersecurity analyst need

• Hardware replacement

• BSOD resolution

• Ethical hacking

• Surfing the net

Risk response type when you call Jake from State Farm

• Avoid

• Transfer

• Mitigate

• Accept

Risk response type when you add an IDS to your network

• Transfer

• Mitigate

• Avid

• Accept