What do computing systems log that can help detect cyber incidents?
What is an indicator of compromise (IoC)?
What do authentication logs record?
Which of the following is a host-based indicator of compromise?
What might indicate unauthorized changes to a system’s configuration?
What is a file-based indicator of compromise?
What is a behavior-based indicator of compromise?
A system log shows an attempt to elevate user privileges without authorization. What type of indicator is this?
Why are logs important in detecting cyber attacks?
A file is found with a name known to be associated with malware. What type of indicator is this?