-: In this section of the course, 2 2
we're going to discuss the classification of threats. 3 3
Our focus in this section 4 4
is going to be split across several domains, 5 5
including Domain 1, Security Operations, 6 6
Domain 2, Vulnerability Management, 7 7
and Domain 3, Incident Response Management, 8 8
with coverage across three different objectives. 9 9
Objective 1.4 states 10 10
that you must be able to compare and contrast 11 11
threat-intelligence and threat-hunting concepts. 12 12
Objective 2.3 states that given a scenario, 13 13
you must analyze data to prioritize vulnerabilities. 14 14
And Objective 3.1 states 15 15
that you must be able to explain concepts 16 16
related to attack methodology frameworks. 17 17
So, as we move through this section, 18 18
we're going to start out by describing 19 19
how we can classify different threats 20 20
as either benign, malicious, known, or unknown. 21 21
Then, we'll dive into the concept of threat actors, 22 22
including the various types, 23 23
like script kiddies, hactivists, and APTs. 24 24
After that, 25 25
we're going to take a look at the commoditization 26 26
of malware and zero-day threats 27 27
and uncovering where some really large amounts of money 28 28
are being spent and earned based on these zero-days. 29 29
Next, we'll talk about the different types 30 30
of threat research that are conducted to classify 31 31
these different threats that we're going to experience. 32 32
And then, we'll jump into several attack frameworks 33 33
to help us identify these threats and attacks, 34 34
including the Lockheed Martin Cyber Kill Chain, 35 35
the MITRE ATT&CK Framework, 36 36
and the Diamond Model of Intrusion Analysis frameworks. 37 37
After that, we're going to spend some time 38 38
discussing various indicator management frameworks, 39 39
such as the Structured Threat Information eXpression, 40 40
known as STIX, 41 41
the Trusted Automated eXchange of Indicator Information, 42 42
known as TAXII, or T-A-X-I-I, 43 43
the OpenIOC and the MISP frameworks. 44 44
Finally, we're going to take a short quiz 45 45
to see what you learned during this section of the course 46 46
and review each of those quiz questions fully 47 47
to ensure you can explain why the right answers were right. 48 48
So, let's get started diving into the concepts 49 49
surrounding the classification of threats 50 50
in this section of the course.