Search: staging — Cyber Encyclopedia

166 terms · 75/46/45

27 rezultata za „staging" · 2 direktna · 25 povezanih

Pretnje

2 direktna pogotka

№ 005
Loader / Dropper Loaders and droppers are couriers. Their only job is to deliver the infection to the machine. A dropper carries the payload with it and writes it to the system; a loader is usually smaller and pulls the payload from the internet only once it has landed. Neither does anything more than that — and that is their advantage.
pretnja · malware
№ 014
Remote access trojan - RAT A RAT can be both surveillance and a staging point on the way to something worse. Through it the attacker can take your data, but can also wait for the right mo …
pretnja · malware

↳ Povezano

25 stavki koje koriste „staging"

№ 039
Command & Control Command and control communication involves establishing a persistent channel between the attacker and the compromised system for sending commands and receiving results. The attacker uses this channel to manage malware, launch new attack phases, and retrieve data.
tehnika · C2
№ 016
DLL Sideloading Technique of loading a malicious DLL through a legitimate program that requests it.
tehnika · execution
№ 036
DNS Tunneling Technique of exfiltrating data or C2 communication through DNS queries.
tehnika · exfiltration / impact
№ 031
Data Exfiltration Data exfiltration involves transferring stolen information from the compromised environment to an attacker-controlled location. Data can be sent through encrypted channels, legitimate cloud services, email, or even physical media.
tehnika · exfiltration / impact
№ 040
Domain Fronting Technique of hiding C2 traffic behind legitimate CDN domains.
tehnika · C2
№ 003
EDR EDR (Endpoint Detection and Response) is a technology that continuously monitors endpoint activity, records events, and enables detection, investigation, and response to threats that bypassed preventive controls.
odbrana · endpoints
№ 002
Email Security Email security encompasses technologies that filter inbound and outbound messages to prevent phishing, malware delivery, and business email compromise. It operates at the server or cloud level before the message reaches the user.
odbrana · endpoints
№ 042
Encrypted C2 Channels Using HTTPS, DNS-over-HTTPS, or other encrypted protocols for C2.
tehnika · C2
№ 001
Endpoint Protection Endpoint protection encompasses software solutions that protect computers, servers, and mobile devices from malicious software and unauthorized activities. It combines classic signature-based malware detection with heuristic analysis and behavior-based detection.
odbrana · endpoints
№ 041
Fast-Flux DNS Rapid rotation of IP addresses associated with a C2 domain.
tehnika · C2
№ 035
Firewall A firewall is a control placed at the boundary between networks that permits or blocks traffic according to predefined rules — deciding who may talk to whom, on which ports and protocols.
odbrana · resilience
№ 012
Impair Defenses Defense evasion encompasses techniques by which an attacker conceals their activity from security tools, analysts, and automated detection systems. The goal is to remain undetected for as long as possible in the compromised environment.
tehnika · execution
№ 014
In-Memory Execution Executing malicious code in memory without writing files to disk.
tehnika · execution
№ 020
Incident Response A planned process of identifying, containing, eradicating, and recovering from cyber incidents.
odbrana · monitoring / response
№ 019
Lateral Movement Lateral movement involves an attacker moving from one compromised system to another within the same network. The goal is to expand access to systems containing more valuable data or enabling further escalation.
tehnika · privileges
№ 016
Logging & Monitoring Logging and monitoring involves the systematic recording of activities and events on systems, networks, and applications, along with regular analysis of those records to detect anomalies and security incidents.
odbrana · monitoring / response
№ 038
Malware Delivery Malware delivery encompasses the methods by which malicious software is transferred to a target system. This includes infected attachments, compromised websites, malicious ads, removable media, and compromised software updates.
tehnika · C2
№ 025
Network Segmentation Network segmentation is the practice of dividing network infrastructure into smaller, isolated segments with controlled communication between them. The goal is to limit an attacker's ability to move through the network after compromising a single system.
odbrana · resilience
№ 013
Payload Obfuscation Payload obfuscation involves applying techniques to conceal the content and intent of malicious code. Attackers use encryption, compression, encoding, polymorphism, and packing to evade detection by security tools.
tehnika · execution
№ 011
Persistence Persistence encompasses techniques by which an attacker ensures their access or malicious code survives system reboots, password changes, or other interruptions. The goal is to maintain a foothold in the environment over an extended period.
tehnika · execution
№ 045
Process Injection Injecting malicious code into the address space of a legitimate process.
tehnika · evasion
№ 015
SIEM SIEM (Security Information and Event Management) is a system that collects logs and events from diverse sources across the entire infrastructure, centralizes them, and applies correlation rules to detect suspicious patterns and security incidents.
odbrana · monitoring / response
№ 019
Threat Intelligence Collecting, analyzing, and applying data about current cyber threats.
odbrana · monitoring / response
№ 044
Timestomping Changing file timestamps to hide when they were created or modified.
tehnika · evasion
№ 004
XDR XDR (Extended Detection and Response) unifies data from endpoints, network, email, and cloud.
odbrana · endpoints