domains / families / security / tracking-threat-actor-infrastructure

tracking-threat-actor-infrastructure

separate

Discovers and maps adversary-controlled infrastructure (C2 servers,

When to use

• When managing security operations that require tracking threat actor infrastructure
• When improving security program maturity and operational processes
• When establishing standardized procedures for security team workflows
• When integrating threat intelligence or vulnerability data into operations

Skill page

Source