Chat with us, powered by LiveChat Applying Cyber Threat Intelligence | WriteDen

Applying Cyber Threat Intelligence

This assignment will require you to submit a word document and a powerpoint slidedeck. For this assignment, we will build the profile of the APT group, identifying likely related personas, victims, infrastructure, tools, etc. using the Diamond model and then map the group’s tools, techniques, and procedures (TTPs) to the Lockheed Martin Cyber Kill Chain stages.this assignment has 2 parts.

IT 462 Homework #2: “Applying Cyber Threat Intelligence pt. 1”

undefined

This homework assignment builds on the work you have done earlier in the semester on APT threat groups.For this assignment, we will build the profile of the APT group, identifying likely related personas, victims, infrastructure, tools, etc. using the Diamond model and then map the group’s tools, techniques, and procedures (TTPs) to the Lockheed Martin Cyber Kill Chain stages. This assignment will require you to use several (at least 4) industry reports on the APT group you chose. Include citations in each of the deliverables including the specific page number where the information can be found.

Assignment Deliverables:

A Powerpoint presentation on the APT actor using the Diamond Model (Slide 1: “APT X” summary and subsequent slides on each of the four quadrants) and how its TTPs map to each stage of the Kill Chain, as well as a Word document summarizing your findings (Section 1: “APT X”, Section 2: “APT X Mapping to Cyber Kill Chain”).

  • Use at least 4 incident reports (i.e. individual reports on your APT actor like “Operation Troy”, Operation Blockbuster”, etc.) from cyber security vendors (FireEye/Mandiant, CrowdStrike, Symantec, Novetta, etc.) to fill in the diamond model with virtual personas, email addresses, domains, WhoIs registration records, infrastructures, malware, exploits, vulnerabilities, and victims.
  • On subsequent slides, map the TTPs to each stage of the Cyber Kill Chain. If you are having trouble identifying how the TTPs map, I suggest looking over MITRE’s ATT&CK matrix.
  • In a Word document, write up your findings, dedicating at least a paragraph to each of the points in the diamond model. Who organizationally is likely responsible for conducting these attacks, what is their end goal, what type of victim do they tend to target, how technologically savvy is the actor based on its tools and techniques, does the actor favor one type of attack or exploit over others, etc.

Applying Cyber Threat Intelligence pt. 2”

This homework assignment builds on Homework #2 where you identified core characteristics and TTPs of a specific APT group.For this assignment, the focus is to develop actionable signatures that would detect your APT actor on a network.

This assignment is to create signatures aka actionable detection measures for your APT group. I am expecting that you will develop unique signatures based on the information you provided in Homework #2, not ones lifted from the Internet; plagiarism of this sort will result in an immediate 0 for the assignment and will be recommend to the University for an honor code violation

Assignment Deliverables:

  • A Powerpoint slide or Word document containing YARA-based detection signatures for each stages of the Kill Chain. These YARA signatures must include all three sections; you are the author of the signature, so make sure that is reflected in the meta section. Since reconnaissance is often outside of the control of network defenders, you do not need to create a yara or network-based (Snort, Bro, etc.) signature for phase 1 of the Kill Chain.
  • In cases where YARA signatures are not applicable, SIEM rules/heuristics would also be acceptable, so long as it is tailored to your APT group’s TTPs and not a generalized measure.
  • Also, identify any other relevant mitigations that would prevent this attacker from being able to gain a foothold into the network based on the TTPs you identified in Homework #2 that we would need to be put in place in our network security appliances and across the enterprise.

HOW OUR WEBSITE WORKS

Our website has a team of professional writers who can help you write any of your homework. They will write your papers from scratch. We also have a team of editors just to make sure all papers are of 
HIGH QUALITY & PLAGIARISM FREE.

Step 1

To make an Order you only need to click ORDER NOW and we will direct you to our Order Page at WriteDen. Then fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
 Deadline range from 6 hours to 30 days.

Step 2

Once done with writing your paper we will upload it to your account on our website and also forward a copy to your email.

Step 3
Upon receiving your paper, review it and if any changes are needed contact us immediately. We offer unlimited revisions at no extra cost.

Is it Safe to use our services?
We never resell papers on this site. Meaning after your purchase you will get an original copy of your assignment and you have all the rights to use the paper.

Discounts

Our price ranges from $8-$14 per page. If you are short of Budget, contact our Live Support for a Discount Code. All new clients are eligible for 20% off in their first Order. Our payment method is safe and secure.

Please note we do not have prewritten answers. We need some time to prepare a perfect essay for you.