In this section of the course,
we're going to be covering malicious activity.
Now in the digital age,
the threat landscape is constantly evolving with new forms
of malicious activity emerging at an alarming rate.
Cyber attacks are a subset of these activities
and they become a huge concern for individuals,
businesses, and governments alike.
These attacks are not only increasing in frequency,
but they're also increasing in sophistication
and this makes them quite a challenge to us
as cybersecurity professionals.
Now, in this section of the course, we're going to be diving
into the diverse world of cyber attacks
and shedding some light on the various types, mechanisms
and impacts that they have.
We're going to be exploring the breadth and depth
of malicious activities that lurk in the cyber realm.
Now, it's important for you to understand
these cyber threats, because it really is the first step
towards effective prevention and mitigation
for you as a cybersecurity professional.
Now, by gaining insights into the tactics, techniques
and procedures employed by these cyber criminals,
we as cyber defenders can better equip ourself
to protect our networks
against these invisible yet potent threats.
So in this section of the course, we're going to be focused
on Domain 2 and specifically on objective 2.4.
The objective 2.4 states that given a scenario
you must be able to analyze indicators
of malicious activity.
First, we'll be discussing Distributed Denial of Service
attacks known as DDoS attacks.
As we go through this lesson,
we'll be covering all the different variants
of a Denial of Service attack, including Denial of Service,
Amplified Distributed Denial of Service attacks
Reflected Distributed Denial of service attacks
and the ways that we can avoid
or stop these types of attacks from occurring.
Then we'll be jumping into a discussion
on Domain Name Server attacks, known as DNS attacks,
and this includes DNS cache poisoning,
DNS amplification attacks, DNS tunneling,
domain hijacking, and DNS zone transfer attacks.
After that, we'll be talking
about Directory Traversal attacks.
Now a directory traversal attack
also known as a path traversal
involves explaining insufficient security validation
or sanitization of user supplied input file names.
Next, we'll be discussing privilege escalation attacks.
Now, a privilege escalation attack is the type
of network intrusion that involves exploiting
a system vulnerability to gain elevated access
to resources that are normally protected
from an application or user.
Then we'll be discussing replay attacks.
Now, replay attacks involve the malicious
or fraudulent repeat or delay of a valid data transmission.
In this type of an attack,
an attacker intercepts a data transmission
and then retransmits it.
After that, we're going to be looking at session hijacking.
Now session hijacking, also known as session sidejacking,
cookie hijacking, or session key hijacking is a type
of security attack where a user session is taken
over by the attacker.
In this type of attack,
the attacker can exploit a valid computer session
to gain unauthorized access to information
or services inside of a computer system.
Then we're going to be diving
into malicious code injection attacks.
Now, malicious code injection is a broad class
of attacks where an attacker can introduce harmful code
into a programmer system to cause it to behave
in an unintended way.
After that, we'll be covering Indicators of Compromise,
known as IoCs, and this includes things
like account lockouts, concurrent session utilization,
block content, impossible travel, resource consumption,
resource inaccessibility, out of cycle logging,
publish documents that you've been hacked
and missing log files.
Finally, we'll take a short quiz to see what you learned
during this section of the course
and review each of those quiz questions fully
to ensure you can explain why the right answer was right.
So if you're ready, let's hop on into our coverage
of malicious activity in this section of the course.