Exam (elaborations)
SANS SEC504 Tools – 2024 with 100% Correct Answers
- Course
- Institution
SANS SEC504 Tools – 2024 with 100% Correct Answers
[Show more]
Seller
Follow
Content preview
SANS SEC504 Tools – 2024 with 100%Correct Answers
Exiftool - ✔Exiftool is a Perl script that extracts metadata from many different file types,
including Microsoft Office, PDF, many different image file types, and more. Stego
Screening Tool: Check out metadata of media files
EyeWitness - ✔"EyeWitness scans a range of hosts, recording a screenshot of web
server content. Port Scanning.
take screenshots of websites, provide some server header info, and identify default credentials
if possible" - ✔
FakeLogonScreen - ✔Displays a fake Windows login screen to harvest credentials from a user.
fgdump - ✔fgdump is a legacy password hash extraction tool for Windows systems. It
has largely been superseded by Mimikatz. SAM/AD Hash Dump. Temporarily disables AV
and dumps the passwords
Flamingo - ✔Flamingo is a server process impersonation tool, running on the attacker
system and starting listening server services for SSH, HTTP, LDAP, FTP, and SNMP.
FOCA - ✔FOCA automates the process of discovering files, downloading them, and
extracting the metadata. Review document metadata
FortiSOAR - ✔FortiSOAR is a commercial option for Incident tracking.
, FTK Imager - ✔FTK Imager is a forensic data imaging and inspection tool. Forensic
image acquisition
Ghidra - ✔Ghidra is a software reverse engineering suite of tools developed by the
NSA's Research Directorate.
GNU Debugger - ✔The GNU Debugger is a portable debugger that runs on many Unix-
like systems and works for many programming languages.
Google Hacking Database - ✔Search tool to use Google to identify vulnerabilities in
public websites.
Google Rapid Response (GRR) - ✔GRR is a tool for assisting with scoping and performing
large-scale incident response and hunt teaming. GRR is client-server, with an endpoint on
Windows host systems that report to a centralized web console. Endpoint monitoring for
incident response. incident response framework focused on remote live forensics.
Hashcat - ✔Multi-functional password hash recovery tool; predominantly uses GPUs
for cracking functionality.
Have I Been Pwned - ✔Service to determine if an email address or username is known to
have been included in a major breach.
Hostapd-WPE - ✔Hostapd-WPE impersonates enterprise Wi-Fi access points to
collect authentication credentials from users.
Hydra - ✔Online password guessing tool. Online password cracking
IDA Pro - ✔IDA Pro is a commercial disassembler, useful for malware analysis and many
other reverse engineering tasks.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller KenAli. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.29. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
75759 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now