Exam CCFH-202 All QuestionsBrowse all questions from this exam
Question 34

What information is provided from the MITRE ATT&CK framework in a detection's Execution Details?

    Correct Answer: C

    The MITRE ATT&CK framework is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. A Technique ID is a unique identifier assigned to specific methods adversaries use to achieve their goals. In the context of a detection's Execution Details, the Technique ID from the MITRE ATT&CK framework provides precise information about the specific tactic or technique that was potentially employed. This information helps security analysts understand the nature of the threat and respond appropriately.

Discussion
alanalanalanOption: C

C. Technique ID