Threat Hunting

Question 1

A cyber security technique designed to detect the presence of threats that have not been discovered by a normal security monitoring, and is potentially less disruptive than penetration testing.

Answer 1

Threat Hunting

Question 2

Derived from threat modeling and is based on potential events with a higher likelihood and higher impact.

Answer 2

Establishing a hypothesis

Question 3

Involves the creation of scenarios that show how a prospective attacker might attempt an intrusion and what their objectives might be.

Answer 3

Profiling threat actors and activities

Question 4

What are 4 components of regular monitor and incident response?

Answer 4

Analyze network traffic.
Analyze the executable process list.
Analyze other infected hosts.
Identify how the malicious process was executed.

Question 5

What are some benefits to threat hunting?

Answer 5

Improves detection capabilities.
Integrates intelligence.
Reduces attack surface  
Blocks attack vectors  
Identifies critical assets