All Episodes
Displaying 1 - 20 of 124 in total
What Is an Immutable Backup?
An immutable backup is a protected copy of data that cannot be modified or deleted during a defined retention period, even by accounts that normally possess administra...
What Is Chain of Custody?
Chain of custody is the documented record of how evidence was collected, identified, transferred, stored, examined, and protected from the moment it was acquired. Cert...
What Is Alert Fatigue?
Alert fatigue develops when analysts or users receive so many repetitive, low-quality, or poorly prioritized notifications that important warnings become difficult to ...
False Positives and False Negatives
A false positive occurs when a security control reports malicious activity that is not actually present, while a false negative occurs when genuine malicious activity ...
What Is an Indicator of Compromise?
An indicator of compromise is an observable clue suggesting that malicious activity may have occurred within a system or environment. Certification exams may present a...
What Is Code Signing?
Code signing uses a digital signature to help recipients verify the identity associated with a software publisher and determine whether the signed code changed afterwa...
What Is Dependency Confusion?
Dependency confusion occurs when a software build or package-management system retrieves an attacker-controlled public package instead of the organization’s intended i...
What Is a Hardcoded Secret?
A hardcoded secret is a password, token, application programming interface key, encryption key, or other sensitive value placed directly inside source code, scripts, c...
What Is Path Traversal?
Path traversal occurs when an attacker manipulates a filename or directory path to access information outside the location an application intended to expose. Certifica...
What Is Cross-Site Request Forgery?
Cross-site request forgery occurs when an attacker causes a logged-in user’s browser to submit an unwanted request to a trusted application. Certification exams may de...
What Is Broken Access Control?
Broken access control occurs when an application fails to enforce what an authenticated or unauthenticated user is permitted to view, change, create, or delete. Certif...
What Is Cross-Site Scripting?
Cross-site scripting, or XSS, occurs when an application allows malicious script content to execute in another user’s browser within the context of a trusted website. ...
What Is SQL Injection?
SQL injection occurs when untrusted input changes the structure or meaning of a database command created by an application. Certification exams may describe login form...
What Is Input Validation?
Input validation checks whether data supplied to an application matches the expected format, type, length, range, and permitted values before the application processes...
What Is Egress Filtering?
Egress filtering controls traffic that leaves a network, system, application, or security boundary. Certification exams may describe unauthorized outbound connections,...
What Does It Mean to Quarantine Something?
Quarantine is the process of isolating a suspicious file, message, device, account, or other resource so that it cannot continue interacting normally with users or sys...
What Is Sandboxing?
Sandboxing is a security technique that runs a file, program, process, or website inside an isolated environment with restricted access to the host system and other re...
What Is Tailgating?
Tailgating occurs when an unauthorized person gains physical access to a restricted area by following an authorized individual through a secured entrance. Certificatio...
What Is QR-Code Phishing?
QR-code phishing uses a scannable image to conceal a malicious web address or other attacker-controlled destination. Certification exams may describe a QR code placed ...
What Is Smishing?
Smishing is a form of phishing that uses text messages or mobile messaging services to persuade a recipient to open a malicious link, disclose sensitive information, i...
