A security analyst is performing a forensic analysis on a machine that was the subject of some historic SIEM alerts. The
Posted: Sat Jul 23, 2022 7:37 pm
A security analyst is performing a forensic analysis on a machine that was the subject of some historic SIEM alerts. The analyst noticed some network connections utilizing SSL on non-common ports, copies of svchost.exe and cmd.exe in %TEMP% folder, and RDP files that had connected to external IPs. Which of the following threats has the security analyst uncovered?
A. DDoS
B. APT
C. Ransomware
D. Software vulnerability
A. DDoS
B. APT
C. Ransomware
D. Software vulnerability