Please enable JavaScript.

Coggle requires JavaScript to display documents.

3204 Security Analytics, image - Coggle Diagram

- - - - Task: Set Objective
        
        Acquisition of tools: exploit code and backdoor/trojan
        
        Acquisition of infrastructure: compromise other systems and create new accounts or domains
        
        Identification of targets: people and organisation
        
        Organisational research: business relationship and network topology
    - - Deciding on the tools to be deployed to attack
        
        Often leaves fingerprints
        
        Cannot be detected as it happens [fingerprints are often detected at delivery stage]
        
        Eg. metasploit framework and its component modules, malware infected pdf
    - - Mechanism in which payload gets the target
        
        Protocol based: SMTP, HTTP
        
        Media based: USB device, CD/DVD
    - - Disposition of the exploit
        
        Human
        
        social engineering
        
        Technical
        
        running malicious code in the pdf attached in an email
        
        MITRE Common Vulnerabilities and Exposures (CVE) identifier of the vulnerability exploited
        
        Means of exploiting the vulnerability
        
        embedded in iframe in a webpage
        
        last modified date
    - - Associated with persistence and invocation
        
        Properties
        
        filenames created and their locations
        
        directories
        
        registry keys
        
        additional components downloaded from other sources
        
        any additional communications