Multiple Choice Flashcards

Behavior analysis should trust familiar process names even when actions are suspicious Signature detection becomes obsolete once behavior analysis is deployed in the environment Behavior analysis can help identify suspicious activity that lacks known signatures, but it still needs validation and tuning Signature detection is useful mainly for reviewing closed incidents after recovery