gt: C

response: B


response: C


gt: B

response: A) Form-grabbing


response: B


response: C


gt: A

response: A


response: C


response: D


response: B


response: C


response: C


response: A


response:
B) It uses the password hash to create a Kerberos ticket

B


response: A


response: A


response: C) Denial of Service


response: B


response: A


response: B


gt: D

response: D


response: C


response: B


response: B


response: C


response: D


response:
A) CAPEC-482

A


response: C


response: D


response: A) CAPEC-72


response: C


response: C


response:
A) Use canonicalized data

A


response: A


response: A


response: A


response: A


response: A


response:
A) Highly common in mobile technologies and some languages

A


response: A


response: D


response: A


response: A


response: D


response: D


response:
C).lnk,.bat,.cmd

C


response: B


response: A


response: A


response: D


response: C


response: A


response: B


response: C) T1543.002


response: B


response: A


response: D


response: D


response: C


response: C


response: A


response: D


response: D


response: B


response: A


response: A


response: B


response: A


response: A


response: D


response: D


url: Manual

response: B


response: B


response: C


response: C


response: A) T1517 - Access Notifications


response: D


response: A) Application Logs


response: B


response: A) ICS platform; because it depends on system configuration settings


response: D


url: Diamond Model of Intrusion Analysis_part0.txt

response: B


response: B


response: A


response: A


response: A


response:
C) Implement email filtering solutions on mail servers

C


response: A) Architecture and Design


response: C


response: A


response: B


response: C


response: B


response:
A) Unauthorized data access

A


response: B


response: C) EventBot


response: A


response: C


response:
A) 2009-2011

A


response: B


response:
B) Normalize and filter inputs

B


response: C


response: A) Memory Corruption


response: D


response: C


response: A


response: A


response: C


response: B


response: D


response: A


response: A)


response: D


response:
A) Detailed traffic logs analysis

A


response: B


response: D


response: D


url: NIST CTI sharing_part2.txt

response: D


response: C


response: D


response: B


response: B


response: C


response: A


response: B


response: C


response: B


response: B


response: A


response: B


response: D


response: A


response: D


response: C


response: B


url: NIST CTI sharing_part3.txt

response: D


response: A


response:
A) Control resource access based on user roles

A


response: A


response: B


response: D


response: A


response: D


response: C


response: B


response: B


response:
A) System Partition Integrity (M1004)

A


response: D


response: C


response: D


response: D


response:
C) Increased likelihood of users writing down passwords or using easily typed passwords that are less secure

C


response: C)


response:
A) Implement user input validation

A


response: C


response: B


response: C


response: D


response: B


response: C


response: B


response: B


response: C


response: C


response: D


response: D


response: A


response: B


response: A


response: C


response: B


response: D


response: D


response: D


response: A) T1115, Collection


response: B


response:
B) Access Control; Gain Privileges or Assume Identity

B


response:
B) Dirb, DirBuster, GoBuster

B


response: C


response: A


response: C


response: B


response: B


response: A


response: A


response:
C) ACCESS_FINE_LOCATION and ACCESS_BACKGROUND_LOCATION

C


response: B


url: NIST security incident handling_part0.txt

response: C)


response: B


response: C) Technical Impact: Bypass Protection Mechanism


response: A) Github logs


response:
A) Azorult

A


response: C)


response: C


response: D


url: NIST Cybersecurity Framework_part1.txt

response: C


response: D


response: D


response: D


response: C) Unexpected State


response: C


response: A) S0677 - AADInternals


response: A) A synthesized activity is shown instead


response: D


response: D


response: C


response: C


response: D


response: A)


response: C


response: C


response: B


response: B


response: A


response: D


response: D


response:
B) Anubis

A


response: C


response: A


response: C


response: B


response:
C) Read confidential data

C


response: A


response: C


response: B


response: A


response: B


response: C


response: C


response: B


response: A


response: B


response: B


response: B


response: C


response: B


response: C


response: B


response: D


response: D


response: C


response: A


response: A


response: A


response: D


response: D


response: D


response: D


response: B


response: A


response: D


response: C


response: D


response: B


response: D


response: C)


response: A


response: D


response: B


response: D


response: C


response: A


response: B


response: B


response: D


response: B


response: C


response: C


response: C


response: A) Availability


response: D


response: C


response: A


response: B


response: A


response: D


response: C


response: A) Network Traffic Logs


response: C


response: A


response: B


response: B


response: D


response: C


response: B


response: A


response: A


response: B


response: C


response: D


response: B


response: B


response: C


response: B


response: B


response: C


response: A) Application Vetting and API Calls


response: A) M1026 - Encryption


response: D


response: D


response: C