Question

What rule source is common for both BIOC and IOC types?

a) Endpoint Logs
b) Network Traffic
c) Threat Intelligence
d) Endpoint Agents

Answer 1

The common rule source for both BIOC and IOC types is Threat Intelligence, which provides contextual information to enhance detection and monitoring of threats.

Step-by-step explanation:

The rule source that is common for both BIOC (Behavioral Indicator of Compromise) and IOC (Indicator of Compromise) types is c) Threat Intelligence. Threat Intelligence provides valuable context around threats including the various tactics, techniques, and procedures (TTPs) as well as indicators such as IP addresses, URLs, and file hashes. By leveraging threat intelligence as a rule source, security analysts can enhance the detection of both BIOC and IOC by applying the knowledge of existing threats to monitor activities and identify suspicious behavior or known bad entities across their networks.