To Learn Flashcards
Regex
\b
Metacharacter matches at the beginning or end of a word
\bLO - matches LO at the beginning of a word
LO\b - matches LO at the end of a word
Regex
( )
Defines and captures groups of characters.
^(IMG\d+.png)$
Regex
[ ]
Matches a single instance of the specific characters.
[abc]
[A-F]
[0-5]
Regex
?
Adds optionality to a character. It does not have to be present to match.
ab?c will match with abc or ac
Regex
.
Escaped the period character to match the period.
The period charcter without the backslash is a wildcard for any character.
Tombstone
The original file is quarantined and replaced with one describing the policy violation and how the user can release it again
DLP Remediation Actions
Alert only
Block
Quarantine
Tombstone
Heuristic Analysis
A method that uses feature comparisons and likenesses rather than specific signature matching to identify whether the target of observation is malicious.
Behavioral Analysis
A heuristic model of “typical” behavior is created. An alert is created for any behavior that is outside of the baseline.
Anomaly Analysis
A network monitoring system that uses a baseline of acceptable outcomes or event patterns to identify events that fall outside the acceptable range.
Trend Analysis
The proess of detecting patterns within a dataset over time, and using those patterns to make predictions about future events or better understand past events
Data acquisition
The process of obtaining a forensically clean copy of data from a device held as evidence
Order of data acquisition
- CPU registers and cache memory
- Contents of system memory (RAM)
- Data on persistent mass storage devices
- Remote logging and monitoring data
- Physical configuration and network topology
- Archival media
Password spraying
A brute force attack in which multiple user accounts are tested with a dictionary of common passwords
Credential stuffing
A brute force attack in which stolen user account names and passwords are tested against multiple websites
