Attack frameworks

Question 1

what is a attack framwwork?

Answer 1

It describes incidents in common language and are used to understand the Adversaries, techniques, tactics and detection mechanisms

Question 2

What is MITRE ATT&CK?

Answer 2

These are adversarial tactics, techniques and common knowledge, identification numbers, tactics, data sources, and creation/modification date

Question 3

what is the Diamondmdel of Intrusion Analysis

Answer 3

An emphasis on relationships and characteristics, the core features: Adversary, Victim, Infrastructure, capabilities (Meta features: timestamps,results,direction, resources), Confidence value

Question 4

Kill chain -Attack framewok?

Answer 4

Recon>Weaponization (create the exploit)>Delivery to target>Exploitation>Installation>Command and control> Actions on Objective (goal of exercise)