Courses of Action

Courses of action is an action taken either to prevent an attack or to respond to an attack that is in progress.

Courses of action describes technical or automated responses such as applying patches, reconfiguring firewalls. It can also describe higher-level actions like employee training or policy changes.

For example, courses of action to mitigate a vulnerability could describe applying the patch that fixes it.

• Define Courses of Action
  Define courses of action to prevent an attack or to respond to an attack that is in progress.

Related concepts

• Observables
• Indicators
• Attack Patterns
• Campaign
• Identity
• Infrastructure
• Intrusion Set
• Location
• Malware
• Malware Analysis
• Object Sighting
• Observed Data
• Threat Actor
• Threat Event
• Threat Grouping
• Threat Note
• Threat Opinion
• Threat Report
• Tool
• Vulnerability
• Marking Definition
• Data Component
• Data Sources
• Relationships Objects
• Potential Relationships

Related tasks

• Define RSS Feeds