An Incident Responder has reviewed a STIX report and now wants to ensure that their systems have NOT been compromised by any of the reported threats. Which two objects in the STIX report will ATP search against? (Choose two.)
A) SHA-256 hash
B) MD5 hash
C) MAC address
D) SHA-1 hash
E) Registry entry

Question

Quizplus · Accepted Answer

ATP (Advanced Threat Protection) typically searches against file hashes like SHA-256 and MD5 to identify known malicious files.

An Incident Responder Has Reviewed a STIX Report and Now