CompTIA CySA+ Study Guide, 3rd Edition

Chapter 4Threat Intelligence

THE COMPTIA CYBERSECURITY ANALYST (CYSA+) EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain 1.0: Security Operations
  • 1.4 Compare and contrast threat-intelligence and threat-hunting concepts
    • Threat actors
    • Tactics, techniques, and procedures (TTP)
    • Confidence levels
    • Collection methods and sources
    • Threat intelligence sharing
    • Threat hunting

Security professionals of all types need to fully understand threats in order to prevent them or limit their impact. To do this, you need threat intelligence: data about your adversaries, their motivations, capabilities, as well as the tactics, techniques, and procedures they may use. In addition, you need information about what to look for when your adversaries ...