12Threat Actors and Motivations13Threat Vectors, Attack Surfaces, and Social Engineering14Application, OS, and Web Vulnerabilities15Hardware, Virtualization, Cloud, Supply-Chain, and Other Vulnerabilities
16Indicators — Malware and Physical Attacks17Indicators — Network, Application, Cryptographic, and Password Attacks18Mitigation Techniques19Confusable Attacks and Distractors20PBQ Practice — Threat-to-Mitigation Triage21Domain 2 Drill