GIAC Certified Incident Handler

When using a Netcat backdoor listener for shell access, what userID will the commands be executed as?

A SOC analyst is reviewing event logs from several network devices across the enterprise and notices that there are an abnormally high number of logon attempts...

An analyst runs the following nmap scan from their Linux computer as a non-privileged user. The target host, 10.0.233.2, has tcp/445 open. What network traffic...

MyDoom, Zotob, and Blaster are all examples of what type of malware?

An incident handler investigating abnormal system behavior has captured traffic from two client workstations. Both clients sent dozens of SYN packets to an exte...