Last Updated on November 16, 2023 by InfraExam
You work in an organization’s SOC as a threat hunter. A new day-zero attack is “in the wild” and is now compromising systems on the internet beyond the research labs. You have proactively consulted the Cisco threat intelligence site, Talos, and have obtained information about the new attack. However, you would like to speak with industry peers who have experience with this threat. Which external stakeholder will you contact?
- media relations
- local law enforcement
- other (peer) incident response teams
- members of your own SOC
| Explanation & Hint:
In the scenario described, as a threat hunter, you would want to contact other (peer) incident response teams among external stakeholders. Peer incident response teams in other organizations, especially those with experience or insights into the same or similar threat, can be valuable sources of information and knowledge sharing. Collaborating with peers in the industry can help you gain a better understanding of the new day-zero attack, share threat intelligence, and collectively work on mitigating the threat’s impact on the broader cybersecurity community. |