Question: Why is looking for TTPs ( Tactics , Techniques, and Procedures ) better than signatures when attempting to detect covert channels? Choose one 1 point

Why is looking for TTPs (Tactics, Techniques, and Procedures) better than signatures when attempting to detect covert channels?
Choose one 1 point
TTPs are defined by MITRE
TTPs lack ownership
Signatures are easily changed
Signatures arent unique

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!