166 terms · 75/46/45
kompozit · edukator režim · za predavanje i PDF

Fileless malware

Pretnja u centru, tehnike kojima se izvodi levo, odbrane koje je suzbijaju desno. Ispod — mapa faza napada: kojom tehnikom se ulazi i koja odbrana je presreće.

↘ Techniques used to carry it out5

threat · № 011 · malware

Fileless malware

Fileless malware never writes itself to disk during the attack, so antivirus software has a harder time finding it. While it operates it lives in memory and works with tools the system already has — PowerShell, scripts, built-in commands. Because it delivers its payload through legitimate tools, its activity is not easy to tell apart from normal work.

↓ izvor: prvi po vezama Najčešći ulaz: Impair Defenses. Ključna odbrana: Logging & Monitoring.

↗ How it is defended against6