A security analyst is using a recently released security advisory to review historical logs, looking for the specific activity that was outlined in the advisory. Which of the following is the analyst doing?
A) A packet capture
B) A user behavior analysis
C) Threat hunting
D) Credentialed vulnerability scanning

Question

Quizplus · Accepted Answer

The analyst is proactively searching through historical logs for indicators of compromise or specific activities mentioned in the advisory, which is a form of threat hunting.

A Security Analyst Is Using a Recently Released Security Advisory