NSE7-SOC-AR-7-6: Fortinet NSE 7 - Security Operations 7.6 ArchitectDemo

Question

Review the incident report.

An attacker obtained employee names, roles, and email patterns from public press releases, then used them to create tailored emails. The emails instructed recipients to review an attached agenda through a link hosted outside the corporate domain.

Which two MITRE ATT&CK tactics most closely match this report?

Choose two

A Discovery
B Initial Access
C Defense Evasion
D Reconnaissance

Explanation

Gathering employee identities, roles, and email patterns from public sources is Reconnaissance because it develops targeting information before compromise. Sending tailored emails that direct recipients to a malicious externally hosted link is spearphishing link, a Phishing technique within the Initial Access tactic.

Learn more

NSE7-SOC-AR-7-6: Fortinet NSE 7 - Security Operations 7.6 ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ25

Community Discussion