A method threat actors use to reinstall malware onto a device after it is cleaned and rebooted. The program leaves vulnerabilities within the device for malware to relaunch.
A federal act put into effect in 2020 that requires federal entities to implement strict information security measures.
Once an application matches a policy, it stops processing so no further policies will take effect on that application. Care must be taken when creating and ordering policies to ensure that policies apply as intended.
A security program or software that filters your network traffic and prevents outsiders, including malicious threat actors, from entering your organization.
A type of malicious software that infects computers using legitimate programs. It exists without relying on files and leaves no trace that it was ever there, making it difficult to detect and remove.
A golden ticket attack is an attack that targets Windows Active Directory access control. Threat actors bypass normal authentication by taking advantage of a Kerberos weakness. Attackers must have access to the system before a Golden Ticket Attack can be performed.
A US federal act established in 1996 that restricts access to individuals’ private medical information.
Actions taken by users/employees that unintentionally result in the infiltration of malware, viruses, and more into an organization.
Another word for computer, particularly references a computer that is connected to a network.
A file hash is a unique numerical value calculated using a specific algorithm. The hash of a file can help validate the integrity of a file. If a single value within the file is changed, the hash will be completely different. For example, changing a period to a question mark in a word document will result in a completely different hash value.
The physical portions of a computer or machine: wiring, circuit boards, storage drives, etc.
Generally, someone who uses technical skills to overcome technical problems. In cybersecurity, a hacker is referred to as a threat actor with malicious intent to access an individual’s or organization’s data unauthorized.
An arrangement of characters numbers that act is the identification number of any internet-connected device. Each device has its own unique IP Address.
When different computers work together in some way, often exchanging data between them.
Policies and standard procedures set into place to protect sensitive data from unauthorized access.
A strategy developed for organizations to respond to cyber threats and attacks in their network.
Another way of saying on demand, something is enabled exactly when needed and disabled when no longer needed.
An authentication protocol used to verify the identity of a host or user.
