IoC Indicators of compromise Flashcards
1
Q
Account lock out
A
-credential aren’t working
-exceeded log in attempts
-account administratively disabled
2
Q
Concurrent session usage
A
-in two places at once
-multiple account log in from different places
3
Q
Impossible travel
A
-logged in from different states just in minutes
4
Q
Resource consumption
A
refers to the utilization of system resources (such as CPU, memory, network bandwidth, and storage) by applications, processes, or malicious activities. Attacks that exploit resource consumption can lead to service degradation or denial of service
5
Q
Out of cycle logging
A
-occurs at an unexpected time
6
Q
Missing logs
A
Attackers will remove logs to cover their tracks
7
Q
Published/documented
A
-company data may be published one
