Loading lesson

Malware types and indicators of compromise

Domain 2: threats, vulnerabilities, and mitigations (V7 22%) / attacks (V8 24%) · Lesson 6 of 8

Lesson 6 of 8

Ask a tutor

Lesson 6 of 8 · Domain 2: threats, vulnerabilities, and mitigations (V7 22%) / attacks (V8 24%)

Malware types and indicators of compromise

3 quick checks≈4% of the testCore

Reading is free. Sign in to tick off lessons, keep your place and track your mastery.

By the end you’ll be able to

Distinguish ransomware, trojans, worms, viruses, spyware, adware/bloatware, keyloggers, logic bombs, rootkits and fileless malware by behaviour
Analyse indicators of compromise: file hashes, malicious IP addresses and domains, malicious processes, file system artifacts, timestamps and plaintext strings

0% read

Recognise log-based indicators: out-of-cycle logging, missing logs and log manipulation

Select the appropriate first response for the malware identified (isolate, contain, reimage, restore from backup)

This lesson hasn’t been written yet

Security+ lessons are written from the official syllabus the first time a learner opens them, then saved for everyone. Sign in and this one is written for you in a minute or two. It’s free.

Sign in Create a free account