Frameworks & Acronyms
This core security concept ensures that a sender cannot deny having sent a specific message or authorizing a transaction.
What is Non-Repudiation
This one-way cryptographic function is used to create a unique digital "fingerprint" of a file to verify its integrity
What is Hashing
This port is the unencrypted predecessor to SSH and should never be used for remote administration.
What is Port 23 / Telnet
This type of malware encrypts a user's files and displays a demand for payment to unlock them
What is Ransomware
This simple command is used as the first step in troubleshooting network connectivity by sending ICMP echo requests to a target IP address
What is ping
The fundamental principle that dictates users should only be granted the absolute minimum access rights necessary to perform their job duties.
What is Least Privilege
This fast, symmetric encryption algorithm is the current industry gold standard and is used in WPA2 and WPA3 Wi-Fi security.
What is AES
A firewall rule blocking Port 3389 is designed to secure this specific Windows remote access service.
What is Remote Desktop Protocol / RDP
This social engineering attack involves leaving a malicious USB drive in a company parking lot, hoping a curious employee will plug it in.
What is Baiting
On a Linux system, an analyst would use this command to display the local network interface configuration, including the IP and MAC addresses
What is ifconfig or ip
This standardized framework, created by FIRST, is used to assign a numerical score (0.0 to 10.0) reflecting the severity of a software vulnerability.
What is CVSS
In an asymmetric encryption system, if Alice wants to send a secret, encrypted message to Bob, she must encrypt it using this specific key.
What is Bob's Public Key
To ensure directory queries are encrypted to prevent credential sniffing, you should transition from LDAP on Port 389 to LDAPS on this port
What is Port 636
An attacker uses an automated tool to try a single, common password against thousands of different usernames to avoid account lockouts.
What is Password Spraying
To view all active TCP/UDP connections and listening ports on a host system, a security analyst will run this command
What is netstat
This globally accessible knowledge base categorizes adversary behaviors into specific Tactics, Techniques, and Procedures (TTPs).
What is the MITRE ATT&CK Framework
If Alice wants to attach a mathematically verifiable digital signature to a contract, she must generate the signature using this specific key.
What is Alice's Private Key
This protocol operates on Port 53 and is frequently targeted by attackers for amplification DDoS attacks or data exfiltration via tunneling
What is DNS
This attack involves an adversary inserting malicious JavaScript into a legitimate website, which then executes in the browser of other users visiting the site.
What is Cross-Site Scripting / XSS
This powerful Linux text-processing command is heavily used by SOC analysts to search massive log files for specific keywords, such as finding "failed password" entries
What is grep
This intrusion analysis model maps cyber events into a four-node structure consisting of Adversary, Capability, Infrastructure, and Victim.
What is the Diamond Model
This asymmetric algorithm uses complex mathematical curves to provide the same level of security as RSA, but with significantly smaller key sizes, making it ideal for mobile and IoT devices.
What is Elliptic Curve Cryptography / ECC
o establish secure file transfers using SSH encryption, an administrator must utilize SFTP, which operates on this specific port.
What is Port 22
This post-exploitation attack involves capturing a user's hashed password and submitting it directly to an authentication server to log in, without ever cracking the plaintext password
What is a Pass-the-Hash / PtH attack
This command-line utility is used by administrators to change the read, write, and execute permissions of a specific file or directory on a Linux system.
What is chmod