Intelligence-Driven Incident Response, 2nd Edition

Index

A

• abductive reasoning, Abductive reasoning
• ACH (Analysis of Competing Hypotheses), Analysis of Competing Hypotheses-Analysis of Competing Hypotheses, Judgment and Conclusions
• actionability, of intelligence products, Actionability-Actionability
• actionable intelligence, Target-Centric Analysis
• actions on objective (AoO), Actions on Objective-Actions on Objective, Remediating actions on objective
• active collection methods, Active versus passive collection methods
• active defense, Active Defense
  • deceive action, Deceive
  • degrade action, Degrade
  • deny action, Deny
  • destroy action, Destroy
  • disrupt action, Disrupt
  • hack back and, Active Defense
  • offensive cyber operations, Active Defense
• activity groups, Basic Model
• activity threads, Basic Model
• actor-centric targeting, Actor-Centric Targeting-Goals
  • actors versus people, Actor-Centric Targeting
  • goals, Goals
  • starting with known information, Starting with Known Information
  • useful information during the find phase, Useful Information During the Find Phase-Behavior
  • using the kill chain, Using the Kill Chain-Road Runner: Developing the kill chain
• Admiralty Code, Confidence Levels
• adversarial operations, Red Teaming
  • (see also red team/red teaming)
• adversary, defined, Basic Model
• AEM-Cube, Building a Diverse Team
• analysis at strategic level, Analysis-Scrub down
  • brainstorming, Brainstorming
  • processes for analyzing strategic intelligence, Processes for analyzing strategic intelligence-Scrub down
  • scrub down, Scrub down
  • SWOT analysis, SWOT analysis
• Analysis of Competing Hypotheses ...