| Term | English | Bahasa Malaysia |
|---|---|---|
| CTI | Cyber Threat Intelligence — analyzed information about threats supporting decisions | Risikan ancaman siber — maklumat ancaman yang dianalisis untuk menyokong keputusan |
| IoC | Indicator of Compromise — artifact (IP, domain, hash) suggesting intrusion | Petunjuk pencerobohan — artifak (IP, domain, hash) yang menandakan pencerobohan |
| TTP | Tactics, Techniques & Procedures — how an adversary behaves | Taktik, teknik & prosedur — cara musuh beroperasi |
| TLP | Traffic Light Protocol — sharing rules for intel (CLEAR/GREEN/AMBER/RED) | Protokol lampu isyarat — peraturan perkongsian maklumat |
| C2 | Command & Control — attacker infrastructure directing malware | Infrastruktur arahan & kawalan penyerang |
| Defanged | Indicator made non-clickable, e.g. hxxp, [.] | Penunjuk dinyahaktifkan supaya tidak boleh diklik |
| RaaS | Ransomware-as-a-Service — ransomware rented to affiliates | Ransomware sebagai perkhidmatan — disewa kepada rakan pengedar |
| Double extortion | Encrypt and steal data, then threaten publication | Peras ugut berganda — sulitkan dan curi data, kemudian ugut untuk dedah |
| DLS | Data Leak Site — extortion site where groups post claims | Laman kebocoran data — tempat kumpulan menyiarkan tuntutan |
| CNII / NCII | Critical National Information Infrastructure (Cyber Security Act 2024) | Infrastruktur Maklumat Kritikal Negara (Akta Keselamatan Siber 2024) |
| PIR | Priority Intelligence Requirement | Keperluan risikan keutamaan |
| RFI | Request for Information — ad-hoc intelligence question | Permintaan maklumat — soalan risikan ad-hoc |
| APK scam | Malicious Android app lure, typically impersonating banks/couriers | Penipuan APK — aplikasi Android berniat jahat menyamar sebagai bank/kurier |
| MISP | Open-source threat intelligence sharing platform | Platform perkongsian risikan ancaman sumber terbuka |
Terms get added as Tanya Rectifyq questions reveal what needs explaining.