Security Incident-Identification Schema
Last updated
Last updated
Identifying Security Incidents Related to Advanced Persistent Threats (APTs)
Group Categorization
Group Reviews
Recent Incidents
General Source:
Identifying Threats Using Patterns:
Actor: [Individual or entity responsible for the threat]
Action: [Actions taken or methods used by the threat actor]
Asset: [Targeted resources or information]
Attribute: [Characteristics or properties related to the incident]
Prioritized Defended Asset List (PDAL) List and prioritize assets to defend Source:
Action Framework Structured Threat Information eXpression (STIX) Source:
KILL CHAIN MAPPING Information list for KILL CHAIN MAPPING Source:
