1
Q
VERIS
A
Metrics designed to provide common language
2
Q
Veris 4 A’s
A
Actions
Actors
Assets
Attributes
3
Q
VERIS Incident tracking
A
General info about an incident including ID number
4
Q
VERIS Victim Demographics
A
Describes the affected organization.
5
Q
Incident Description
A
Who did what to whom with what result?
6
Q
VERIS threat model designed by
A
A4 model by Verizon
7
Q
VERIS Discovery and response
A
Timeline, incident discovery, and lessons learned
8
Q
VERIS Impact Assessment
A
Categorize losses, qualitative assessment of effect.
CCNA Cyber Ops SECOPS
flashcards
Decks in class (19)
# Cards
-
SECOPS 1: Defining the SOC24
-
SECOPS 2: NSM Tools and Data11
-
Security Onion1
-
SECOPS 3: Incident Analysis in a Threat Centric SOC20
-
SECOPS 4: Hunting Cyber Threats41
-
SECOPS 5: Event correlation and normalization23
-
SECOPS 6: Common Attack Vectors32
-
SECOPS 7: Identifying Malicious Activity8
-
Regex14
-
SECOPS 98
-
SECOPS 10: SOC Playbook (Not needed for the exam)13
-
SECOPS 11: SOC Metrics7
-
SECOPS 12: SOC WMS and Automation18
-
SECOPS 13: Incident Response Plan20
-
Appendix A: CSIRT13
-
Appendix B: VERIS8
-
RFI36
-
NIST 800-61r29
-
Blueprint60
