A security analyst is working on improving the organization's cybersecurity posture and needs to analyze a recent attack on their network.
The analyst must determine the relationships between the adversary, infrastructure, and attack capabilities while also understanding the attacker's techniques, tactics, and procedures.
Which frameworks should the analyst use to comprehensively understand the attack and enhance the organization's vulnerability scanning methods?
Diamond Model of Intrusion Analysis and MITRE ATT&CK Framework
ISO/IEC 27001 Information Security Management System
Cyber Kill Chain and CIS Critical Security Controls
NIST Cybersecurity Framework and OWASP Top Ten
