312-39 › Proactive Threat Detection
This domain covers proactive threat detection for the SOC analyst: building hunting hypotheses, operationalizing threat intel with the Diamond Model, and writing high-fidelity detection rules. Questions test practical judgment about evidence sources, SIEM rule logic, and STIX/TAXII feed integration rather than memorized definitions.
312-39 Proactive Threat Detection — All 38 Questions
Every question in this domain with answers and detailed explanations.