Analyze Indicators of Malicious Activity

13A

Malware Attack Indicators

p.333

1. Malware Classification p.333
2. Computer Viruses p.334
3. Computer Worms and Fileless Malware p.335
4. Spyware and Keyloggers p.337
5. Backdoors and Remote Access Trojans p.338
6. Rootkits p.339
7. Ransomware, Crypto-Malware, and Logic Bombs p.341
8. TTPs and IoCs p.342
9. Malicious Activity Indicators p.344

13B

Physical and Network Attack Indicators

p.345

1. Physical Attacks p.345
2. Network Attacks p.346
3. Distributed Denial of Service Attacks p.348
4. On-Path Attacks p.350
5. Domain Name System Attacks p.351
6. Wireless Attacks p.353
7. Password Attacks p.354
8. Credential Replay Attacks p.356
9. Cryptographic Attacks p.357
10. Malicious Code Indicators p.359

13C

Application Attack Indicators

p.360

1. Application Attacks p.360
2. Replay Attacks p.361
3. Forgery Attacks p.363
4. Injection Attacks p.364
5. Directory Traversal and Command Injection Attacks p.366
6. URL Analysis p.367
7. Web Server Logs p.368