← Attribution and Actor Profiling — From Evidence to Threat Actor

Module Quiz

8 questions · Pass at 80%

Question 1 of 8

The Diamond Model of intrusion analysis identifies four vertices. An IR analyst documents: C2 infrastructure hosted on bulletproof hosting in Romania, Cobalt Strike beacon with a custom HTTPS profile, targeting of pharmaceutical companies, and attribution to a suspected criminal ransomware group. Which vertex contains the C2 infrastructure information?