What solution would help users ingest sysmon data?
What is Winlogbeat?
Solve this famous hacker saying. Hack the _________
What is planet?
What are persistence, access expansion, and exfiltration?
Fill in this quote: The humany of _____ and ______ will always trump security policy? (Chapter 2)
What is convenience and habit?
This e-zine had the longest run and was considered one of the best by Fyodor.
What is Phrack?
What is the name of the language that will be focused on helping security analysts?
Self replicating malware, that ususally uses an exploit to gain access is called this?
What is a worm?
Why are attackers more motivated than defenders?
Attackers have everything to gain and little to nothing to loose. The reward is great.
According to the defender lifecycle what are the three counter actions that can be taken after privacy?
What are prevent, obstruct, and constrain?
This hacker discovered SQL Injection.
Who is RFP (aka rain.forrest.puppy)?
What is the group of ML functions called that detects anomalies in the amount of information that is contained in strings within a bucket?
What is Information Content Functions?
This worm was named after a soda.
What is Code Red?
In Chapter 4, what reinforces focus.
What is positive feedback?
Under the principals of economy, what hinders defenders?
You can't prove a negative.
Expensive cost center.
Unable to provide value.What is the longest running hacker conference?
What is summercon?
True or False. The Endpoint product can add additional exploit protection.
True
What is the name of an exploit that has not addressed by the manufaturer that is affected by it?
What is a 0 (zero) day exploit?
What is the main reason attackers know techology better than defenders?
What is motivation?
What is the main reason defenders loose?
What is strategy?
This hacker collective was home to a 2020 presidential candidate.
What is the cDc (Cult fo the Dead Cow)?
Solve this problem. Customer A wants to ingest data from 6000 Windows host, 2000 Linux servers, and a few hundred applications. How big of a cluster do they need?
What is "it depends"?
What security tool is Trinity seen using correctly in the movie The Matrix?
What is nmap?
What is the main reason that attackers are successful?
What is strategy?
What are the three main failed tactics used by defenders?
What are signature based detections, password policies, and end user training?
This is awarded only to those who have emerged unbeaten from the crucible of elite DEF CON competition?
What is a DEFCON Black Badge?