2nd Day

Question 1

Security Intelligence is?

Answer 1

The process where data is generated and is then collected, processed, analyzed, and disseminated to provide insights into the security status of information systems.

Question 2

Cyber Threat Intelligence is?

Answer 2

Investigation, collection analysis, and dissemination of information about emerging threats and threat sources to provide data about the external threat landscape.

Question 3

In Intelligence Gathering, Planning & Direction is?

Answer 3

The process of setting out goals for what you aim to gain from the intelligence gathering effort.

Question 4

Collection (& Processing) is?

Answer 4

A part of Cyber Threat Intelligence that is implemented by software tools to gather data which is then processed for later analysis (i.e. SIEM log aggregators) The data is then converted into a standard format (Such as organized out by columns).

Question 5

Analysis in threat intelligence is?

Answer 5

Performed against the given use cases from the planning phase and may utilize automated analysis, AI, and machine learning. Commonly used on Unknown or “not sure” intelligence that is neither known good activity, or known bad activity.

Question 6

Dissemination, the 4th phase of Information Gathering, is?

Answer 6

Publishing of information produced by analysts to consumers who need to act on the information provided.

Question 7

Feedback, the final phase, aims to?

Answer 7

Clarify requirements and improve the collection, analysis, and dissemination of information by reviewing current inputs and outputs.