Answers

For the above analytic, what is the pseudocode a representation of? Splunk Search

What tactic has an ID of TA0003? Persistence

What is the name of the library that is a collection of Zeek (BRO) scripts? bzar

What is the name of the technique for running executables with the same hash and different names? Masquerading

Examine CAR-2013-05-004, what additional information is provided to analysts to ensure coverage for this technique? Unit Tests