Monitoring security events and responding to events of interest on a near-real time basis is always the most desirable situation. However, this is not always possible especially where an organization lacks adequate human resources...

Malicious command execution is one of many important security events to which any security analyst must pay close attention because this is how malicious individuals typically compromise a system or maintain greater control over it...

A reverse shell allows attackers to bypass network security controls by instructing a compromised computer to initiate outbound communication to an attacker’s machine external to the network....

A data breach is a security violation, in which sensitive, protected or confidential data iscopied, transmitted, viewed, stolen or used by an individual unauthorized to do so. Otherterms are unintentional information disclosure, data leak, information leakage, and data spill

Social Engineering attacks, mostly Phishing, remain one of the most potent cyber-attack tactics. An email account can be compromised in a number of different ways. In some cases, a weak password may be easily cracked, guessed, or obtained through a public breach. In other cases, an unsuspecting or untrained user may unwittingly hand his/her password to criminals by clicking on a malicious link in an email, social networking site, or webpage.

Drive by download generally occurs in two ways. The first way is when a user takes an action (e.g. clicks on a link or installs a malicious software) without knowing its full implications, while the second way is when a user unwittingly visits a compromised website, which then redirects the traffic to another site where a malicious code or file is served to the end user’s computer.