Certified Threat Intelligence Analyst (CTIA) — Question 35

During the process of threat intelligence analysis, John, a threat analyst, successfully extracted an indication of adversary’s information, such as Modus operandi, tools, communication channels, and forensics evasion strategies used by adversaries.
Identify the type of threat intelligence analysis is performed by John.

Answer options

• A. Operational threat intelligence analysis
• B. Technical threat intelligence analysis
• C. Strategic threat intelligence analysis
• D. Tactical threat intelligence analysis

Correct answer: D

Explanation

The correct answer is D, as John's analysis focuses on the specific tactics and techniques used by adversaries, which is characteristic of tactical threat intelligence. The other options refer to broader levels of threat intelligence: operational focuses on the operational aspects, technical deals with the specific tools and exploits, and strategic pertains to long-term threats and trends.