A cybersecurity analyst is responding to an incident. The company's leadership team wants to attribute the incident to an attack group. Which of the following models would BEST apply to the situation?
A) Intelligence cycle
B) Diamond Model of Intrusion Analysis
C) Kill chain
D) MITRE ATT&CK

Question

Quizplus · Accepted Answer

The Diamond Model of Intrusion Analysis is specifically designed to attribute cyber incidents to specific attack groups by analyzing the relationships between adversaries, capabilities, infrastructure, and victims.

A Cybersecurity Analyst Is Responding to an Incident