What goal of an Advanced Persistent Threat (APT) group aims to disrupt or damage on behalf of a cause?

Splunk SOAR uses what feature to automate security workflows so that analysts can spend more time performing analysis and investigation?

Which of the following SPL searches is likely to return results the fastest?

A threat hunter generates a report containing the list of users who have logged in to a particular database during the last 6 months, along with the number of times they have each authenticated. They sort this list and remove any user names who have logged in more than 6 times. The remaining names represent the users who rarely log in, as their activity is more suspicious. The hunter examines each of these rare logins in detail.
This is an example of what type of threat-hunting technique?

Tactics, Techniques, and Procedures (TTPs) are methods or behaviors utilized by attackers. In which framework are these categorized?