Chapter 14 - Describing Security Event Analysis

Question 1

Name 7 Steps of Cyber Kill Chain

Answer 1

• Developed by Lockheed Martin
  1. Reconnaissance
  2. Weaponization
  3. Delivery
  4. Exploitation
  5. Installation
  6. Command-and-Control
  7. Actions on Objectives

Question 2

Name 4 Diamond Model Nodes

Answer 2

Adversary - Threat actor responsible for threat or exploit
Capability - Tools or techniques used by the threat actor
Infrastructure - The physical or logical communication structure used to maintain and control capabilities
Victim - Adversary’s target

Question 3

Describe Chain of Custody

Answer 3

The chronological paper trail that describes the exact time each person took possession of specific evidence.