Command And Control
Command and control (C2), also written C&C, refers to the infrastructure and communication channels an attacker uses to remotely control compromised systems within a victim's network, issuing commands and receiving stolen data or status updates from installed malware.
6 resources across 1 library
Glossary Terms(6)
Data Exfiltration
Data exfiltration is the unauthorized transfer of data out of an organization's systems, whether carried out by an external attacker after a breach, a maliciou…
Lateral Movement
Lateral movement is the set of techniques an attacker uses to move through a network from an initially compromised system to other systems, in order to expand…
Privilege Escalation
Privilege escalation is the technique of exploiting a bug, misconfiguration, or design flaw to gain a higher level of access than originally granted, moving fr…
Living off the Land Attack
A living-off-the-land (LotL) attack is an intrusion technique in which an attacker uses legitimate, pre-installed system tools and administrative software alre…
Command and Control (C2)
Command and control (C2), also written C&C, refers to the infrastructure and communication channels an attacker uses to remotely control compromised systems wi…
Indicator of Compromise (IOC)
An indicator of compromise (IOC) is a piece of forensic evidence — such as a malicious file hash, IP address, domain name, registry key, or file path — that si…