The Nation state in this report I am refering to is RUSSIA.
The report should include publicly available information/intelligence about malware usage, what it does, where it came from, etc.
Final Report – Your final report is required to be 10-12 pages minimum (including graphs, timelines, diagrams, etc). I am more interested in seeing the product of your analysis using the tools and methods taught in this class than anything else, but will still hold you to a high standard of grammar, spelling, formatting, etc. The vast majority of your pages will be visuals from the tools we learn to use. The rubric will cover everything you need to know about being successful with this report. In short, this should be a report you could hand to stakeholders in your organization to answer their information requirements, help them solve problems, and fill in missing knowledge to help them make better decisions for the organization.
Your paper should be operational or strategic in nature – up to you. Operational means there are more finite technical details that can be used to threat hunt and/or defend our computer enterprise better. For this final report, I am your intelligence consumer. I am an executive or other senior stakeholder in your organization (large non-profit, corporation, or government). I am responsible for making big security decisions for the health and safety of the organization’s assets, employees, and customers. Your final report is your analysis to me that will be used to help me make those decisions, so it must include a sufficient amount of information regarding the selected adversary and how they might attack/exploit our organization in the future (or how they might be doing it now). Feel free to fill in details regarding what type of organization we are in – you can even use your current day-job organization’s industry, if applicable. I am leaving the nuances of who we are and what we do up to you in order to give you the largest aperture possible – use your imagination. Remember – context is key!
Week by week we have been instructed to build the report 1 – 2 pages a week as follows: For this week 1, your final report submission needs to be 1-2 pages in length and include intelligence on malware usage by your chosen adversary. The report should include publicly available information/intelligence about the malware, what it does, where it came from, etc. If you have the means and expertise, you could even review tactical malware reverse engineering reports (like the ones you researched earlier in this module) to provide a more detailed analysis of that malware. For the rubric requirement of VISUALS this week, you may include the visuals found during your research (properly cited of course). In future modules you will be required to create your own using the tools. If you feel you have the experience/skills to use the malware tools this week, feel free to create your own relevant visuals.
For this week 2, your final report submission needs to be 2-3 pages in length and include analysis of your chosen adversary using structured techniques. There are many to choose from and which you choose (and how many) are up to you. The visuals you create in this module will be used throughout your report at the end. For the rubric requirement of VISUALS this week, you may include the visuals found during your research (properly cited of course) but challenge yourself to create your own using the tools learned in this module (especially Analyst Notebook – attempt to create a link diagram and a timeline).
Your 2-3 pages this week can be all visuals – and you will undoubtedly create more from the tools we will learn in later modules. Not all structured analytic techniques have visual output, however. If you really want to challenge yourself, research tools like “What If?” analysis, Outside-In Thinking, or Red Team analysis (all of these are in the CIA document provided in Module 2.2).
For this week 3, your final report submission needs to be 1-2 pages in length and include a list of information requirements that your organization (in real life or theoretically) would have about your chosen actor/topic. I would like to see a rather lengthy list (10-20 is sufficient) – really give it some thought. This will assist you in the coming weeks to really narrow down what is missing in your paper. Also show me a prioritization of that list with a bit of justification WHY you prioritized those requirements. Select at least two of your requirements and write a few new paragraphs for each that answer those questions. If you are having trouble coming up with requirements, think of it this way — what is the gap in knowledge the consumer has about this topic? — your requirement is the question that highlights that gap.
For this week 4, your final report submission needs to be 2-3 pages in length and include analysis of your chosen adversary that you have extracted from open source finished intelligence products. Feel free to add more pages than that if you have time – a very large percentage of your final paper should include intelligence collected from finished intelligence reports like the ones we viewed in this module.
5). Attached is a file of week 3’s assignment for reference (mod 3.6).
6). Attached is a file of week 1’s assignment for reference ( mod 1.6).
7). Attached is a screenshot of tools to incorportate into the report.
