Chapter 1

Question 1

IOC

Answer 1

Indicator of Compromise.

IOCs are network events that are known to either precede or accompany an attack of some sort.

Goes with: Indicator Management

Question 2

STIX

Answer 2

Structured Threat Information eXpression is an XML-based programming language that can be used to communicate cybersecurity data among those using the language.

STRIX was created with several core purpose in mind:

• To identify patterns that could indicate cyber threats
• To help facilitate cyber threat response activities, including prevention, detection, and response
• The sharing of cyber threat information within an organization and with outside partners or communities that benefit from the information