ACL
A list that indicates which users or groups are allowed or refused on a resource.
View definitionClear, practical definitions to understand network, security, systems and IT vocabulary.
A list that indicates which users or groups are allowed or refused on a resource.
View definitionAdversary-in-the-middle attacks intercept or manipulate authentication exchanges, potentially stealing session tokens and bypassing some MFA flows.
View definitionAll the points by which a system can be attacked.
View definitionAttack surface management continuously inventories and assesses exposed assets, services, and weaknesses that attackers might exploit.
View definitionMicrosoft's Windows disk encryption feature.
View definitionA blue team defends an organization by monitoring threats, investigating incidents, and improving security controls.
View definitionA bootkit is malicious code that compromises the boot process to establish persistence before the operating system fully starts.
View definitionBreach and attack simulation tools safely emulate adversary techniques to assess detection and prevention controls.
View definitionAn attack that tries many combinations of passwords until it finds the right one.
View definitionBusiness email compromise uses impersonation or compromised accounts to deceive employees into transferring money or sensitive information.
View definitionCAPEC is MITRE's catalog of common attack patterns describing methods adversaries use to exploit weaknesses.
View definitionCASB is a concept or mechanism used in cybersecurity to control the use of cloud services and data exchanged
View definitionChain of custody documents who collected, handled, transferred, and stored evidence to preserve its integrity and traceability.
View definitionCommand and control refers to channels attackers use to issue instructions to compromised systems and receive information.
View definitionContinuous Threat Exposure Management systematically discovers, prioritizes, validates, and reduces exploitable security exposures.
View definitionCredential access describes attacker techniques for obtaining passwords, tokens, hashes, or other authentication material.
View definitionAn attack that tests on a stolen identifier service during other data leaks.
View definitionA public identifier assigned to a known security vulnerability.
View definitionA rating system used to express the technical severity of a vulnerability.
View definitionCommon Weakness Enumeration is a catalog of software and hardware weakness types used to classify potential vulnerabilities.
View definitiona cybersecurity model that breaks an attack into successive stages from reconnaissance through actions on objectives
View definitionData exfiltration is the unauthorized transfer of sensitive information from an organization to an external destination.
View definitionDefense evasion covers techniques attackers use to avoid detection or bypass security monitoring and protective controls.
View definitionA set of controls to prevent the leakage of sensitive data.
View definition