Beginner
201 CREDS
Learn the threat landscape by behaviour, since malware brand names change and behaviour does not.
You can name what a piece of malware is doing from its effects.
- Separate ransomware, infostealers, loaders, and remote access trojans by what each one does.
- Trace what each family leaves behind on a host.
- Match a set of observed symptoms to the likely category.