Describe the malware infection life cycle

Assignment Help Basic Computer Science

Reference no: EM133542969

Assignment:

Describe the functions of the following tools:

FireEye EX, IronScales, ProofPoint
FireEye ETP
FireEye NX, Palo Alto, Cisco Umbrella, Cisco Sourcefire
FireEye HX, Eg: MDE, Sentinel, Crowdstrike, Carbon Black

1. What are the first steps that we must take when reviewing an alert?

2. Describe the malware infection life cycle in your own words, how does it relate to the intrusion kill chain model?

3. What is MITRE ATT&CK?

4. What is OODA LOOP?

5. What is data exfiltration and how can it be prevented?

6. What happens when a callback is established on a system and what steps are required to remediate the situation?

7. When investigating an incident, what do we document?

8. In a situation where all SIEM tools are down or not available, where do we go to start investigation on a potential intrusion?

9. What is a process?

10. How are IPS tools different from IDS tools?

Reference no: EM133542969

Questions Cloud

Explain how this intellectual property is captured : How can a the team will communicate this process map with the support people that will be responsible for carrying out these processes.

How can innovative ideas be incorporated : How can innovative ideas be incorporated into an environment of constant change?

What is cda and what is the ccd : What is CDA? 2. What is the CCD? 3. In plain English, what does the medical director's recommendation mean for the EHR

What is the goal of an organizations system : What is the goal of an organizations system of internal controls? Provide several examples of good internal controls and several examples of poor internal

Describe the malware infection life cycle : Describe the malware infection life cycle in your own words, how does it relate to the intrusion kill chain model?

Adea does not cover just-cause terminations : If this is his first offense then the company is required to use progressive discipline because he is over 40 years ol d. No - ADEA does not cover just-cause

Protect herself against a large loss assessment : protect herself against a large loss assessment if the association suffers an underinsured loss, Rosalind should make sure her standard homeowners policy

Differences between thin and thick consent : Explain the differences between thin and thick consent and Discuss vicarious liability and cyberliability. List the top categories of litigation

Discuss a description of the business and its market : Discuss a description of the business and its market of your choice. If you are using an actual business or industry, include links to references

User Account

All Pages