A security analyst discovered a specific series of IP addresses that are targeting an organization. None of the attacks have been successful. Which of the following should the security analyst perform NEXT?
A) Begin blocking all IP addresses within that subnet
B) Determine the attack vector and total attack surface
C) Begin a kill chain analysis to determine the impact
D) Conduct threat research on the IP addresses

Question

Quizplus · Accepted Answer

Conducting threat research on the IP addresses will help the analyst understand the nature of the threat, the potential risk, and the appropriate response before taking further action.

A Security Analyst Discovered a Specific Series of IP Addresses