Attack frameworks give analysts a shared vocabulary for describing how attacks unfold and a structure for finding gaps in defenses. Instead of saying the attacker got in and did bad things, you can say which phase or tactic each action belongs to, compare incidents, and check whether your detections cover each stage. CySA+ expects you to know what each framework models, how they differ and when you would reach for each one.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.