ECCouncil 312-85 試験概要:
ECCouncil 312-85 認定試験の出題範囲:
| トピック | 出題範囲 |
|---|
| トピック 1 | - Threat Hunting and Detection: This section measures the skills of Threat Intelligence Managers and covers concepts related to proactive threat hunting. Candidates will learn about automation in threat hunting to enhance detection capabilities within their organizations.
|
| トピック 2 | - Introduction to Threat Intelligence: This section of the exam measures the skills of Threat Analysts and Managers and covers fundamental concepts of cyber threat intelligence. Candidates will learn about the threat intelligence lifecycle and various frameworks that guide the collection and analysis of threat data. They will also explore threat intelligence platforms (TIPs) and how these platforms function in cloud environments. Additionally, candidates will examine future trends in threat intelligence and the importance of continuous learning in this rapidly evolving field.
|
| トピック 3 | - Dissemination and Reporting of Intelligence: In this section, the exam emphasizes communication skills for candidates who will recognize the qualities of effective communication in reporting threat intelligence to their organizations.
|
| トピック 4 | - Threat Intelligence in SOC Operations, Incident Response, and Risk Management: This topic focuses on integrating and supporting incident response efforts and contributes to overall risk management strategies within organizations.
|
| トピック 5 | - Data Collection and Processing: Targeted at Threat Analysis Managers, this section covers various aspects of threat intelligence data collection. Candidates will learn about managing threat intelligence collection processes, identifying sources and feeds, and acquiring data effectively. They will also explore bulk data collection techniques, data processing methods, and how to enrich threat data in cloud environments.
|
| トピック 6 | - Data Analysis: This topic focuses on enhancing analytical skills for Threat Analysts related to data analysis techniques relevant to threat analysis. They will understand the threat analysis process and how to fine-tune their analysis to improve accuracy and effectiveness in identifying potential threats.
|
| トピック 7 | - Cyber Threats and Attack Frameworks: In this section, the exam focuses on Threat Intelligence Specialists and defines key cyber threats, including advanced persistent threats (APTs). Candidates will prove skills in the Cyber Kill Chain, MITRE ATT&CK framework, and the Diamond Model, which is essential for understanding attack methodologies. They will also learn to identify indicators of compromise (IoCs) that signal potential security breaches.
|
参照:https://cert.eccouncil.org/certified-threat-intelligence-analyst.html