1.0 The Cyber Landscape, Frameworks, and Standards (*10%*)
1.1 Summarize the organization of a typical SOC and the tasks belonging to Analyst, Engineer and Architect roles.
1.2 Recognize common cyber industry controls, standards and frameworks and how Splunk incorporates those frameworks.
1.3 Describe key security concepts surrounding information assurance including confidentiality, integrity and availability and basic risk management.
2.0 Threat and Attack Types, Motivations, and Tactics (*20%*)
2.1 Recognize common types of attacks and attack vectors.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Date,Details,Email Payload Type,Users Targeted | |
| 8/2/2020,COPY RE: AWAITING SHIPPING BILL COPY / SHPR : TECHNOCRAFT; rar -> formbook,Attachment,2 | |
| 8/3/2020,RE: Revise PI; zip -> agenttesla,Attachment,2 | |
| 8/3/2020,xyz sender, msoffice_invoice1764233.doc; -> taurus stealer,Attachment,36 | |
| 8/3/2020,RE:Payment Invoice Attached INV.TT; ace -> formbook,Attachment,5 | |
| 8/3/2020,Request for Quotation 6000249203; ace -> agenttesla,Attachment,4 | |
| 8/4/2020,RFQ No. E170619 - 2 power Project; img -> agenttesla,Attachment,72 | |
| 8/4/2020,New Order; rar -> matiex,Attachment,2 | |
| 8/4/2020,Would welcome your feedback; zip -> agenttesla,Attachment,3 | |
| 8/4/2020,FIRST ORDER FROM ORBITKSAS COMPANY; rar -> masslogger,Attachment,2 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Get-Command # Retrieves a list of all the commands available to PowerShell | |
| # (native binaries in $env:PATH + cmdlets / functions from PowerShell modules) | |
| Get-Command -Module Microsoft* # Retrieves a list of all the PowerShell commands exported from modules named Microsoft* | |
| Get-Command -Name *item # Retrieves a list of all commands (native binaries + PowerShell commands) ending in "item" | |
| Get-Help # Get all help topics | |
| Get-Help -Name about_Variables # Get help for a specific about_* topic (aka. man page) | |
| Get-Help -Name Get-Command # Get help for a specific PowerShell function | |
| Get-Help -Name Get-Command -Parameter Module # Get help for a specific parameter on a specific command |
