312-85 › Data Collection And Processing
This domain covers how threat intelligence is gathered, normalized, and made usable before analysis: collection sources, parsing unstructured and structured feeds, indicator extraction, deduplication, and enrichment inside platforms like MISP and TIPs. Questions present analyst scenarios requiring you to choose the correct processing step, identifier, or attribute mapping rather than recall definitions.
312-85 Data Collection And Processing — All 53 Questions
Every question in this domain with answers and detailed explanations.