Hello Everyone,
I am starting my investigation after completion of the BOTSv1 and 2. When it comes to BOTSv3, it is talking about cloud incident. I have been thinking of how to perform reconnaissance. I have learnt the reconnaissance in BOTSv1 and 2 but when it come to BOTSv3, it is more different. I am aware that BOTSv3 provide the CTF questions to visualize the timeline of the attacks. May I kindly know on whether is there another way to visualize the the attack series using the MITRE Attack Framework and the Lockheed Martin Cyber Kill Chain, and timeline of the critical events for this BOTSv3.
Reconnaissance
Weaponization
Delivery
Exploitation
Installation
Command & Control
Actions on objectives
Could you kindly help?
Thank you
