A Repeatable Method for Measuring APT Infrastructure Exposure
An infrastructure query becomes useful when another analyst can reproduce it. The Cisco Talos research on UAT-6275 provides a concrete test case because it includes a narrative report, a Virus Bulletin paper, an IOC repository, and several kinds of infrastructure. A good measurement method should make each query answer a…