問題文
A team wants one model that ties a single adversary action to the data sources and defenses that could catch it. Which kind of model does that job?
選択肢
- A collection of the malicious samples seen in the wild, held at the level of the individual file and the family that it belongs to.
- A catalog of adversary goals paired with the behaviors that reach them, held at a level between whole campaigns and single flaws.
- A description of the stages that a campaign passes through, held at the level of the operation from first contact through to the goal.
- A list of the flaws that have been found in released software, held at the level of the single defect and the code that exercises it.