跟讀練習: Google Threat Intelligence Platform Overview - 通過影片學習英語口語
選擇練習模式
每種模式都會開啟全屏練習室。
53 句
如果句子過短或過長,請點選 Edit 進行調整。
1
Welcome to this guided tour of Google Threat Intelligence.
2
First, let's explain how the web interface is organized in these four areas.
3
The top bar provides quick access to a powerful search box.
4
Use it to instantly find IOCs, threat actors, malware and campaigns.
5
In addition, you will also find your user settings here.
6
The left menu allows you to navigate through the modules and tools the platform offers.
7
The main section enables you to upload files for analysis, search for any observable, or delve into malicious observations.
8
And finally, the footer provides useful links to our comprehensive documentation and API reference.
9
Let's dive now into the Google Threat Intelligence modules and tools.
10
The Threat Landscape provides adversary intelligence, covering threat actors, malware, campaigns, and IOC collections.
11
intelligence combines curated findings from our expert analysts with valuable crowdsourced data from the community.
12
The Threat Profile tool helps you focus on what matters most based on strategic criteria such as your industry,
13
country, targets, malware roles, and actors' motivations to filter our vast threat intelligence data and show you recommended threats.
14
Now let's head to the Threat the Actor section.
15
On an Actor's card, for example, APT29, you'll find a high-level summary, an overview of the group, and their latest activity.
16
Each tab offers a deeper dive into details like associated IOCs, TTPs, and connections to other threats.
17
The IOC Investigation Module is designed for quickly searching and analyzing IOCs.
18
Let's demonstrate by searching for a file hash.
19
This file analysis report shows the Google Threat intelligence assessment, including the verdict and the threat score.
20
Here, you can see the latest associations, like its connection to the APT44 threat actor or the dark crystal rat malware family,
21
and gain deeper context from associated reports and IOC collections.
22
Let's review some of the most relevant tabs.
23
The detection tab offers insights from crowdsourced YARA, Sigma, and IDS matching rules, plus antivirus engine detections.
24
Next, the relations tab shows how the file is linked with other observables, while the Behavior tab centralizes all key data gathered from the sandbox detonation,
25
such as screenshots, miter attack mapping,
26
network traffic, and activity across the file system, registry, and processes.
27
Additionally, this module provides live hunt rules to monitor incoming indicators
28
and retro hunt rules to scan the data set of previously submitted You can track files
29
and network artifacts by creating live hunt rules using the visual editor and existing templates.
30
Then, you can navigate to the IOC stream, our centralized notifications hub, where you can monitor all incoming matches from your active rules or other threat subscriptions.
31
The Report and Analysis module is your hub for accessing our expertly curated reports alongside valuable contributions from the cybersecurity community.
32
They are categorized by a variety of types and topic areas, making it easier to search for what's most relevant.
33
The Threat Graph is a dynamic visualization tool that enables you to investigate the relationships between indicators and associated entities,
34
such as threat actors, malware, IOC collections, and reports.
35
Private scanning allows you to analyze files and URLs without sharing them with anyone beyond your organization.
36
Scanning artifacts include both static and dynamic analysis and have a limited retention period on our servers.
37
For enhanced control, you can customize the scanning parameters for detonating advanced threats
38
and even open a live interaction session to gain deeper insights that automated analysis might miss.
39
The Vulnerability Intelligence module delivers a comprehensive and actionable understanding of vulnerabilities.
40
It achieves this by combining broad open source data with deeply curated intelligence.
41
Each vulnerability report details continuously updated context to help users prioritize patching and mitigation efforts.
42
The specialized tabs offer insights into affected products, suggested solutions, and related exploits or proof of concepts.
43
ATT&CK Surface Management empowers organizations to continuously monitor and assess their external digital assets from an adversarial perspective.
44
Create collections, which are scanning projects guided by various scan workflow templates to accurately identify exploitable assets and misconfigurations.
45
Digital threat monitoring actively focuses on observing the external threat landscape, including the deep and dark web,
46
for any indicators of potential risks to your organization's brand, data, and reputation.
47
Research tools enables you to safely explore the existing raw data, use this intelligence to create monitors based on our templates, and retrieve alerts on new findings.
48
Finally, the Technology Integration section allows you to seamlessly deliver threat
49
intelligence data to your other security systems through our extensive out-of-the-box integrations.
50
Simply search this section for a specific cybersecurity solution and you can get it up and running within minutes.
51
For best practices on automation and integrations, like using service accounts, refer to the documentation.
52
That concludes our tour of the Google Threat Intelligence platform.
53
Thank you for watching.
FOR YOU
推薦影片
本課的詞彙與口語要點
這段影片共有 53 個句子、793 個單詞可供跟讀。 講話部分時長為 5:41。 說話人語速平穩,每分鐘約 140 個詞,很適合跟讀。 只有 71% 的單詞屬於英語最常用的 3,000 詞,詞彙難度較高。
影片中的重點詞彙
影片中 15 個值得學習的單詞,附發音和釋義:
| 單詞 | 發音 | 釋義 |
|---|---|---|
| module 名詞 | /ˈmɑd͡ʒul/ | 模組 /模組 |
| monitor 名詞 | /ˈmɑ.nɪ.tɚ/ | 顯示器 /顯示器 |
| associate 名詞 | /əˈsoʊʃi.ət/ | 同行, 同事 |
| insight 名詞 | /ˈɪnsaɪ̯t/ | 見地 /見地 |
| indicator 名詞 | /ˈɪn.dɪˌkeɪ.tə(ɹ)/ | 指示符 |
| template 名詞 | /ˈtɛm.plɪt/ | 模板, 型板 |
| vulnerability 名詞 | /ˌvʌln(ə)ɹəˈbɪlɪti/ | 脆弱性 |
| comprehensive 形容詞 | /ˌkɑm.pɹəˈhɛn.sɪv/ | 全面的, 綜合的 /綜合的 |
| landscape 名詞 | /ˈlan(d)skeɪp/ | 風景 /風景, 景色 |
| asset 名詞 | /ˈæsɛt/ | 資產 /資產 |
| integration 名詞 | /ˌɪn.tɪˈɡɹeɪ.ʃən/ | 融合, 統合 /統合 |
| combine 動詞 | /kəmˈbaɪn/ | 結合 /結合, 組合 /組合 |
| dive 動詞 | /daɪv/ | 潛水 /潛水 |
| continuously 副詞 | /kənˈtɪnjuəsli/ | 不斷 /不斷, 一直 |
| tab 名詞 | /tæb/ | 標籤 /標籤, 分頁 /分頁 |
需要注意的發音
- “sh” 和 “zh” 音: collections /kəˈlɛkʃənz/, associate /əˈsoʊʃi.ət/, integration /ˌɪn.tɪˈɡɹeɪ.ʃən/, detection /dɪˈtɛk.ʃən/, documentation /ˌdɑkjəmɛnˈteɪʃən/
- 長單詞——注意重音位置: associate /əˈsoʊʃi.ət/, indicator /ˈɪn.dɪˌkeɪ.tə(ɹ)/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, comprehensive /ˌkɑm.pɹəˈhɛn.sɪv/, integration /ˌɪn.tɪˈɡɹeɪ.ʃən/
如何用這段影片練習
- 先完整聽一遍影片,不要開口,記下不認識的單詞。
- 用正常速度逐句跟讀,每句重複到你的節奏與說話人一致為止。
- 錄下自己的聲音並與原聲對比,特別注意 module, monitor, associate 這類單詞。
什麼是跟讀法?
跟讀法 (Shadowing) 是一種有科學依據的語言學習技巧,最初開發用於專業口譯員的培訓,並由多語言者Alexander Arguelles博士普及。這個方法簡單而強大:您在聽英語母語原聲的同時立即大聲重複——就像是一個延遲1-2秒緊跟說話者的影子。與被動聽力或語法練習不同,跟讀法強迫您的大腦和口腔肌肉同時處理並模模擬實的講話模式。研究表明它能顯著提高發音準確性,語調,節奏,連讀,聽力理解和口語流利度——使其成為雅思口語備考和真實英語交流最有效的方法之一。












