Consider the process that begins with file retrospection, continues to interrogate the file and update its disposition over time, then records the pathway that the software and files take from device to device. This process is an example of which Cisco AMP feature?
A) file reputation
B) attack chain weaving
C) breach hunting
D) file sandboxing
E) machine learning

Question

Quizplus · Accepted Answer

Attack chain weaving is the process of tracking and analyzing the movement and behavior of files across devices, updating their status, and understanding their role in potential security incidents.

Consider the Process That Begins with File Retrospection, Continues to Interrogate