1.5: Threat Actors and Vectors Flashcards
1
Q
CVE
A
Common Vulnerabilities and Exposures
Community managed lists of vulnerabilities.
Sponsored by DHS and CISA(Cybersecurity and Infrastructure Security Agency)
2
Q
NVD
A
US National Vulnerability Database
summary of CVE’s, Also sponsored by CISA and DHS.
3
Q
AIS
A
Automated Indicator Sharing
Way to share important threat data freely.
4
Q
STIX
A
Structured Threat Info eXpression
Describes cyber threat info, includes abilities, capabilities, and response info.
5
Q
TAXII
A
Trusted Automated eXchange of Indicator Info
Securely shares STIX data.`
6
Q
IOC
A
Indicators of Compromise
event that indicates an intrusion.
ex: unusual amount of network activity, uncommon login patterns.
7
Q
TTP
A
Tactics, techniques and procedures
What are adversaries doing and how are they doing it.
