Behavioral analysis

Question 1

Early Attack Detection

Answer 1

Identify attacks early on when attackers are taking their first steps.

Question 2

Internal Threat Detection

Answer 2

Stop attackers that are already inside and covertly manipulating systems.

Question 3

Incident Root Cause Analysis

Answer 3

Find the root cause of security incidents and defend against similar incidents.

Question 4

What behaviour patterns can you learn from schedules?

Answer 4

Detect anomalies when user logins or system processes occur outside regular times.

Question 5

Applications and Ports

Answer 5

Identify suspicious activity when unfamiliar applications or ports are accessed.

Question 6

Regions and IP Addresses

Answer 6

Detect logins from unusual IP addresses or geographical locations.

Question 7

Devices

Answer 7

Identify logins from unknown or unsecured devices.

Question 8

Device Usage

Answer 8

Detect unusual device behavior such as typing speed, mouse movement, or application usage.

Question 9

Network Traffic

Answer 9

Identify anomalies in network traffic volume, patterns, or unfamiliar payloads.

Question 10

What is Social Network Analysis

Answer 10

Social network analysis is a method of studying relationships between objects and events in a social structure

Question 11

What is social network analysis

Answer 11

Tools are used to analyse patterns of relationships among people in groups.

Question 12

Example of Social Network Analysis

Answer 12

This could be done by looking at how people interact with each other or by analysing the different types of relationships between them