Pretnje
7 direktnih pogodaka-
№ 011
Fileless malware … er time finding it. While it operates it lives in memory and works with tools the system already has — PowerShell, scripts, built-in commands. Because it delive …pretnja · malware
-
№ 050
Denial of Service / DoS … ially shaped requests can consume a great deal of memory, hold connections open, crash a parser, or push the application into doing whatever costs it the most.pretnja · availability
-
№ 049
Distributed Denial of Service / DDoS … e application requests are sent that consume CPU, memory or the database. On the victim's side the result is the same: the service stops working.pretnja · availability
-
№ 023
Pass-the-Hash … not used to log in everywhere; protection of the memory the hash lives in (Credential Guard); network segmentation; a move from NTLM to Kerberos. The main reco …pretnja · identity
-
№ 038
Remote Code Execution … e deserialization, file upload, document parsers, memory handling or wrongly exposed services. The details differ, but the consequence is the same: the applicat …pretnja · applications
-
№ 052
Resource Exhaustion … ets what a system cannot work without: processor, memory, disk, network connections, threads, the database or processing queues. The aim is not necessarily to s …pretnja · availability
-
№ 018
Token Theft … raight from the browser store or from application memory. Adversary-in-the-middle phishing, where a fake page forwards your login to the real service in real ti …pretnja · identity
Tehnike
5 direktnih pogodaka-
№ 014
In-Memory Execution Executing malicious code in memory without writing files to disk.tehnika · execution
-
№ 045
Process Injection Injecting malicious code into the address space of a legitimate process.tehnika · evasion
-
№ 021
Pass-the-Hash Hashes are extracted from memory of compromised systems (LSASS process).tehnika · privileges
-
№ 013
Payload Obfuscation … ing a malicious payload that is only decrypted in memorytehnika · execution
-
№ 032
Resource Exhaustion … le to legitimate users. The attacker targets CPU, memory, network bandwidth, disk, or connection limits.tehnika · exfiltration / impact
Odbrane
3 direktna pogotka-
№ 021
Digital Forensics Includes disk, memory, network, and mobile device forensics.odbrana · monitoring / response
-
№ 001
Endpoint Protection Endpoint protection encompasses software solutions that protect computers, servers, and mobile devices from malicious software and unauthorized activities. It combines classic signature-based malware detection with heuristic analysis and behavior-based detection.odbrana · endpoints
-
№ 014
Secrets Management Applications, scripts, and services need secrets to do their work — passwords, API keys, certificates, database connection strings. The wrong place for them is code, a config file, a repository, or a chat message. Secrets management means a central, protected store (a vault) from which an application fetches a secret exactly when it needs it, instead of carrying it around in plaintext.odbrana · identity / access