Threat Hunting with Elastic Stack

Assessments

In the following pages, we will review all of the practice questions from each of the chapters in this book and provide the correct answers.

Chapter 1 – Introduction to Cyber Threat Intelligence, Analytical Models, and Frameworks

1. c. Processes and methodologies tightly coupled with, and in support of, traditional SecOps.
2. a. Information
3. b. Delivery
4. a. Lateral Movement
5. d. Infrastructure

Chapter 2 – Hunting Concepts, Methodologies, and Techniques

1. d. Disrupt
2. a. Authorized binaries abused for nefarious purposes.
3. b. A process to age indicators through response tiers

Chapter 3 – Introduction to the Elastic Stack

1. d. Elasticsearch
2. b. Input
3. a. Modules
4. c. Discover
5. d. Security

Chapter 4 – Building Your Hunting Lab – Part 1

1. b. Host
2. a. Hypervisor  ...