12Threat Actors and Motivations13Threat Vectors, Attack Surfaces, and Social Engineering14Application, OS, and Web Vulnerabilities15Hardware, Virtualization, Cloud, Supply-Chain, and Other Vulnerabilities16Indicators — Malware and Physical Attacks17Indicators — Network, Application, Cryptographic, and Password Attacks18Mitigation Techniques19Confusable Attacks and Distractors20PBQ Practice — Threat-to-Mitigation Triage
21Domain 2 Drill