In building out a threat intelligence report which describes the attackers infrastructure, I noticed that there is no entry in the AttackerInfrastructureType controlled vocabulary to represent a Command and Control Server - something that is commonly needed.
In building out a threat intelligence report which describes the attackers infrastructure, I noticed that there is no entry in the AttackerInfrastructureType controlled vocabulary to represent a Command and Control Server - something that is commonly needed.