Domain 5 - Application Forensics

Question 1

Define these Terms:

Advanced Persistent Threat (APT)

Answer 1

Advanced Persistent Threat (APT) APT is a set of stealthy and continuous computer hacking processes, often orchestrated by human(s) targeting a specific entity.

Question 2

Define these Terms:

Attribution

Answer 2

TBD

Question 3

Define these Terms:

Backdoor

Answer 3

TBD

Question 4

Define these Terms:

Bot

Answer 4

TBD

Question 5

Define these Terms:

Botmaster

Answer 5

TBD

Question 6

Define these Terms:

Botnet

Answer 6

TBD

Question 7

Define these Terms:

Cookie

Answer 7

A small piece of data sent from a website and stored in a user’s web browser while the user is browsing that website.

Question 8

Define these Terms:

Dynamic Analysis

Answer 8

TBD

Question 9

Define these Terms:

Flat File Database

Answer 9

TBD

Question 10

Define these Terms:

Logic Bomb

Answer 10

TBD

Question 11

Define these Terms:

Reconstruction

Answer 11

TBD

Question 12

Define these Terms:

Relational Database

Answer 12

TBD

Question 13

Define these Terms:

Sandbox

Answer 13

An isolated computer, often virtual, that prevents the bug from getting out and infecting the rest of the network.

Question 14

Define these Terms:

SIFT

Answer 14

SANS Investigate Forensic Toolkit.

Question 15

Define these Terms:

Static Analysis

Answer 15

TBD

Question 16

Define these Terms:

Tracking Cookie

Answer 16

Commonly used to compile long-term records of individuals’ browsing histories.

Question 17

Define these Terms:

Trojan Horse

Answer 17

TBD

Question 18

Define these Terms:

Virus

Answer 18

TBD

Question 19

Define these Terms:

Worm

Answer 19

TBD