Search: command-control — Cyber Encyclopedia

166 terms · 75/46/45

21 rezultat za „command control" · 1 direktan · 20 povezanih

Pretnje

1 direktan pogodak

№ 014
Remote access trojan - RAT A RAT gives the attacker remote control of your machine. Once inside they can browse files, switch on the camera and microphone, record what you type and run commands — all of it live, as if sitting in front of your screen. It resembles remote support tools, only on the wrong side of the law.
pretnja · malware

↳ Povezano

20 stavki koje koriste „command control"

№ 039
Command & Control Command and control communication involves establishing a persistent channel between the attacker and the compromised system for sending commands and receiving results. The attacker uses this channel to manage malware, launch new attack phases, and retrieve data.
tehnika · C2
№ 016
DLL Sideloading Technique of loading a malicious DLL through a legitimate program that requests it.
tehnika · execution
№ 036
DNS Tunneling Technique of exfiltrating data or C2 communication through DNS queries.
tehnika · exfiltration / impact
№ 031
Data Exfiltration Data exfiltration involves transferring stolen information from the compromised environment to an attacker-controlled location. Data can be sent through encrypted channels, legitimate cloud services, email, or even physical media.
tehnika · exfiltration / impact
№ 040
Domain Fronting Technique of hiding C2 traffic behind legitimate CDN domains.
tehnika · C2
№ 003
EDR EDR (Endpoint Detection and Response) is a technology that continuously monitors endpoint activity, records events, and enables detection, investigation, and response to threats that bypassed preventive controls.
odbrana · endpoints
№ 042
Encrypted C2 Channels Using HTTPS, DNS-over-HTTPS, or other encrypted protocols for C2.
tehnika · C2
№ 001
Endpoint Protection Endpoint protection encompasses software solutions that protect computers, servers, and mobile devices from malicious software and unauthorized activities. It combines classic signature-based malware detection with heuristic analysis and behavior-based detection.
odbrana · endpoints
№ 041
Fast-Flux DNS Rapid rotation of IP addresses associated with a C2 domain.
tehnika · C2
№ 035
Firewall A firewall is a control placed at the boundary between networks that permits or blocks traffic according to predefined rules — deciding who may talk to whom, on which ports and protocols.
odbrana · resilience
№ 014
In-Memory Execution Executing malicious code in memory without writing files to disk.
tehnika · execution
№ 020
Incident Response A planned process of identifying, containing, eradicating, and recovering from cyber incidents.
odbrana · monitoring / response
№ 019
Lateral Movement Lateral movement involves an attacker moving from one compromised system to another within the same network. The goal is to expand access to systems containing more valuable data or enabling further escalation.
tehnika · privileges
№ 016
Logging & Monitoring Logging and monitoring involves the systematic recording of activities and events on systems, networks, and applications, along with regular analysis of those records to detect anomalies and security incidents.
odbrana · monitoring / response
№ 025
Network Segmentation Network segmentation is the practice of dividing network infrastructure into smaller, isolated segments with controlled communication between them. The goal is to limit an attacker's ability to move through the network after compromising a single system.
odbrana · resilience
№ 011
Persistence Persistence encompasses techniques by which an attacker ensures their access or malicious code survives system reboots, password changes, or other interruptions. The goal is to maintain a foothold in the environment over an extended period.
tehnika · execution
№ 045
Process Injection Injecting malicious code into the address space of a legitimate process.
tehnika · evasion
№ 015
SIEM SIEM (Security Information and Event Management) is a system that collects logs and events from diverse sources across the entire infrastructure, centralizes them, and applies correlation rules to detect suspicious patterns and security incidents.
odbrana · monitoring / response
№ 044
Timestomping Changing file timestamps to hide when they were created or modified.
tehnika · evasion
№ 004
XDR XDR (Extended Detection and Response) unifies data from endpoints, network, email, and cloud.
odbrana · endpoints