Question: Why is looking for TTPs ( Tactics , Techniques, and Procedures ) better than signatures when attempting to detect covert channels? Choose one 1 point
Why is looking for TTPs Tactics Techniques, and Procedures better than signatures when attempting to detect covert channels?
Choose one point
TTPs are defined by MITRE
TTPs lack ownership
Signatures are easily changed
Signatures arent unique
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
