CISA tweaks cyber incident form to spot attacks that might be linked

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its online incident reporting form to help analysts spot when attacks on different organizations may be part of the same campaign. The revised questionnaire asks more specific questions and removes duplicate ones. The form asks whether an incident involved malware, attempts to trick people, hacking techniques, or an insider threat. It also uses terms from MITRE ATT&CK, a catalog of attacker techniques. When organizations describe … More → The post CISA tweaks cyber incident form to spot attacks that might be linked appeared first on Help Net Security.