跟读练习: Google Threat Intelligence Platform Overview - 通过视频学习英语口语

正在创建课程...
1
Welcome to this guided tour of Google Threat Intelligence.
2
First, let's explain how the web interface is organized in these four areas.
3
The top bar provides quick access to a powerful search box.
4
Use it to instantly find IOCs, threat actors, malware and campaigns.
5
In addition, you will also find your user settings here.
6
The left menu allows you to navigate through the modules and tools the platform offers.
7
The main section enables you to upload files for analysis, search for any observable, or delve into malicious observations.
8
And finally, the footer provides useful links to our comprehensive documentation and API reference.
9
Let's dive now into the Google Threat Intelligence modules and tools.
10
The Threat Landscape provides adversary intelligence, covering threat actors, malware, campaigns, and IOC collections.
11
intelligence combines curated findings from our expert analysts with valuable crowdsourced data from the community.
12
The Threat Profile tool helps you focus on what matters most based on strategic criteria such as your industry,
13
country, targets, malware roles, and actors' motivations to filter our vast threat intelligence data and show you recommended threats.
14
Now let's head to the Threat the Actor section.
15
On an Actor's card, for example, APT29, you'll find a high-level summary, an overview of the group, and their latest activity.
16
Each tab offers a deeper dive into details like associated IOCs, TTPs, and connections to other threats.
17
The IOC Investigation Module is designed for quickly searching and analyzing IOCs.
18
Let's demonstrate by searching for a file hash.
19
This file analysis report shows the Google Threat intelligence assessment, including the verdict and the threat score.
20
Here, you can see the latest associations, like its connection to the APT44 threat actor or the dark crystal rat malware family,
21
and gain deeper context from associated reports and IOC collections.
22
Let's review some of the most relevant tabs.
23
The detection tab offers insights from crowdsourced YARA, Sigma, and IDS matching rules, plus antivirus engine detections.
24
Next, the relations tab shows how the file is linked with other observables, while the Behavior tab centralizes all key data gathered from the sandbox detonation,
25
such as screenshots, miter attack mapping,
26
network traffic, and activity across the file system, registry, and processes.
27
Additionally, this module provides live hunt rules to monitor incoming indicators
28
and retro hunt rules to scan the data set of previously submitted You can track files
29
and network artifacts by creating live hunt rules using the visual editor and existing templates.
30
Then, you can navigate to the IOC stream, our centralized notifications hub, where you can monitor all incoming matches from your active rules or other threat subscriptions.
31
The Report and Analysis module is your hub for accessing our expertly curated reports alongside valuable contributions from the cybersecurity community.
32
They are categorized by a variety of types and topic areas, making it easier to search for what's most relevant.
33
The Threat Graph is a dynamic visualization tool that enables you to investigate the relationships between indicators and associated entities,
34
such as threat actors, malware, IOC collections, and reports.
35
Private scanning allows you to analyze files and URLs without sharing them with anyone beyond your organization.
36
Scanning artifacts include both static and dynamic analysis and have a limited retention period on our servers.
37
For enhanced control, you can customize the scanning parameters for detonating advanced threats
38
and even open a live interaction session to gain deeper insights that automated analysis might miss.
39
The Vulnerability Intelligence module delivers a comprehensive and actionable understanding of vulnerabilities.
40
It achieves this by combining broad open source data with deeply curated intelligence.
41
Each vulnerability report details continuously updated context to help users prioritize patching and mitigation efforts.
42
The specialized tabs offer insights into affected products, suggested solutions, and related exploits or proof of concepts.
43
ATT&CK Surface Management empowers organizations to continuously monitor and assess their external digital assets from an adversarial perspective.
44
Create collections, which are scanning projects guided by various scan workflow templates to accurately identify exploitable assets and misconfigurations.
45
Digital threat monitoring actively focuses on observing the external threat landscape, including the deep and dark web,
46
for any indicators of potential risks to your organization's brand, data, and reputation.
47
Research tools enables you to safely explore the existing raw data, use this intelligence to create monitors based on our templates, and retrieve alerts on new findings.
48
Finally, the Technology Integration section allows you to seamlessly deliver threat
49
intelligence data to your other security systems through our extensive out-of-the-box integrations.
50
Simply search this section for a specific cybersecurity solution and you can get it up and running within minutes.
51
For best practices on automation and integrations, like using service accounts, refer to the documentation.
52
That concludes our tour of the Google Threat Intelligence platform.
53
Thank you for watching.

本课的词汇与口语要点

这段视频共有 53 个句子、793 个单词可供跟读。 讲话部分时长为 5:41。 说话人语速平稳,每分钟约 140 个词,很适合跟读。 只有 71% 的单词属于英语最常用的 3,000 词,词汇难度较高。

视频中的重点词汇

视频中 15 个值得学习的单词,附发音和释义:

单词发音释义
module 名词/ˈmɑd͡ʒul/模塊 /模块
monitor 名词/ˈmɑ.nɪ.tɚ/顯示器 /显示器
associate 名词/əˈsoʊʃi.ət/同行, 同事
insight 名词/ˈɪnsaɪ̯t/見地 /见地
indicator 名词/ˈɪn.dɪˌkeɪ.tə(ɹ)/指示符
template 名词/ˈtɛm.plɪt/模板, 型板
vulnerability 名词/ˌvʌln(ə)ɹəˈbɪlɪti/脆弱性
comprehensive 形容词/ˌkɑm.pɹəˈhɛn.sɪv/全面的, 綜合的 /综合的
landscape 名词/ˈlan(d)skeɪp/風景 /风景, 景色
asset 名词/ˈæsɛt/資產 /资产
integration 名词/ˌɪn.tɪˈɡɹeɪ.ʃən/融合, 統合 /统合
combine 动词/kəmˈbaɪn/結合 /结合, 組合 /组合
dive 动词/daɪv/潛水 /潜水
continuously 副词/kənˈtɪnjuəsli/不斷 /不断, 一直
tab 名词/tæb/標籤 /标签, 分頁 /分页

需要注意的发音

  • “sh” 和 “zh” 音: collections /kəˈlɛkʃənz/, associate /əˈsoʊʃi.ət/, integration /ˌɪn.tɪˈɡɹeɪ.ʃən/, detection /dɪˈtɛk.ʃən/, documentation /ˌdɑkjəmɛnˈteɪʃən/
  • 长单词——注意重音位置: associate /əˈsoʊʃi.ət/, indicator /ˈɪn.dɪˌkeɪ.tə(ɹ)/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, comprehensive /ˌkɑm.pɹəˈhɛn.sɪv/, integration /ˌɪn.tɪˈɡɹeɪ.ʃən/

如何用这段视频练习

  1. 先完整听一遍视频,不要开口,记下不认识的单词。
  2. 用正常速度逐句跟读,每句重复到你的节奏与说话人一致为止。
  3. 录下自己的声音并与原声对比,特别注意 module, monitor, associate 这类单词。

什么是跟读法?

跟读法 (Shadowing) 是一种有科学依据的语言学习技巧,最初开发用于专业口译员的培训,并由多语言者Alexander Arguelles博士普及。这个方法简单而强大:您在听英语母语原声的同时立即大声重复——就像是一个延迟1-2秒紧跟说话者的影子。与被动听力或语法练习不同,跟读法强迫您的大脑和口腔肌肉同时处理并模仿真实的讲话模式。研究表明它能显着提高发音准确性,语调,节奏,连读,听力理解和口语流利度——使其成为雅思口语备考和真实英语交流最有效的方法之一。

影子跟读法: 阅读完整分步指南 →