Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

You are a threat hunter in your company. As part of your duties, you detected a local administrator executing remote commands with PsExec. What do

You are a threat hunter in your company. As part of your duties, you detected a local administrator executing remote commands with PsExec.
What do you do?
a. Call the incident response team if the command in PSEXEC is encoded
b. Check whether this is normal as per the security policy
c. Nothing, system administrators use PSEXec all the time
d. Call the incident response team immediately
image text in transcribed

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Recommended Textbook for

Database Concepts

Authors: David Kroenke, David J. Auer

3rd Edition

0131986252, 978-0131986251

More Books

Students also viewed these Databases questions