Frequently Asked Questions
What this playlist answers
5 questions this playlist covers — skim
them for a quick takeaway, or dive into the videos above for the full picture.
A threat actor is an individual or group that intentionally exploits vulnerabilities in systems or networks. Common types include nation-states, organized crime groups, hacktivists, insider threats, and unskilled attackers.
A threat vector is the method or pathway an attacker uses to gain unauthorized access to a system. Common vectors include phishing, malware, social engineering, zero-day exploits, and brute force attacks.
IOCs are pieces of evidence that suggest a system has been compromised, such as unusual network traffic, unexpected file changes, unauthorized logins, or known malicious IP addresses and file hashes.
MITRE ATT&CK is a knowledge base of adversary tactics and techniques based on real-world observations. Security teams use it to understand attack patterns, improve detection, and build stronger defensive strategies.
WannaCry was a 2017 global ransomware attack that exploited a Windows vulnerability to encrypt files on infected machines, demanding payment for decryption. It demonstrated how nation-state-developed exploits can cause widespread damage when misused.