← CTI-Driven Hunting & Hypothesis Engineering

Module Quiz

10 questions · Pass at 80%

Question 1 of 10

A CTI report states: 'The actor likely used a Windows persistence mechanism, possibly scheduled tasks or registry keys.' How should a hunter use this information?