ATT&CK Threat Hunting Practice Questions - MITRE ATT&CK Threat Hunting And Detection Engineering (MAD20) Exam

In the MAD20 six-step TTP-based threat hunt methodology, what is the correct order of the first two steps?

Identify adversary behaviors of interest, then develop hypotheses Implement analytics, then develop hypotheses Collect data, then identify adversary behaviors Execute the hunt, then identify adversary behaviors

Correct Answer:

Identify adversary behaviors of interest, then develop hypotheses

Access more questions from this quiz

Continue to ATT&CK Threat Hunting Practice Questions - MITRE ATT&CK Threat Hunting and Detection Engineering (MAD20) Exam for more practice questions and the full quiz experience.

Access More Questions