A security analyst is preparing a threat for an upcoming internal penetration test. The analyst needs to identify a method for determining the tactics, techniques, and procedures of a threat against the organization’s network.
Which of the following will the analyst MOST likely use to accomplish the objective?
A . A table exercise
B . NST CSF
C . MTRE ATT$CK
D . OWASP
Answer: A