Interpret the output report of a malware analysis tool such as AMP Threat Grid and Cuckoo Sandbox Implementing Cisco Cybersecurity Operations (210-255) Both Cisco AMP Threat Grid and Cuckoo Sandbox are malware analysis tools. They can both execute a piece of malware and report on what the malware tries to do. Cisco AMP Threat Grid […]
Compare and contrast remote exploit and a local exploit Understanding Cisco Cybersecurity Fundamentals (210-250) As noted in the CVSS metrics, there are two types of exploits, those that can be done remotely and those that require local access to complete. Remote exploits can be accomplished over the network and do not require physical access. Some […]
Describe privilege escalation Understanding Cisco Cybersecurity Fundamentals (210-250) Privilege escalation is the manner in which an attacker gains privileges in an application that they shouldn’t have. By accomplishing this attack, an attacker gains more rights that can then allow further exploitation of the host and other network connected hosts. For example, if an attacker is […]
Describe these evasion methods Implementing Cisco Cybersecurity Operations (210-255) Encryption and Tunneling: Attackers use encryption and tunneling to obfuscate their attacks. VPN technologies like IPSec can be used to keep IPS/IDS from seeing the command and control traffic or even the attack traffic. Resource Exhaustion: A denial of service attack against security appliances like IPS […]
© Ben Story 2024.
© Pack IT Forwarding 2024. Powered by WordPress
