Which piece of information is needed for attribution in an investigation?
A) proxy logs showing the source RFC 1918 IP addresses
B) RDP allowed from the Internet
C) known threat actor behavior
D) 802.1x RADIUS authentication pass arid fail logs

Question

Quizplus · Accepted Answer

Known threat actor behavior is crucial for attribution as it helps identify patterns and techniques associated with specific threat actors, aiding in linking activities to them.

Which Piece of Information Is Needed for Attribution in an Investigation