# data[].attributes.body
github.com/danielmiessler/SecLists/blob/master/Discovery/DNS/subdomains-top1million-110000.txt

# data[].attributes.body
85ebcea069580a1dd760d801a56474bc

90501dac479a1474d98b2a80fa95eab6

# data[].attributes.body
irm https://get.activated.win | iex

# data[].attributes.body
https://officecdn.microsoft.com/db/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/media/en-us/O365ProPlusRetail.img

# data[].attributes.attachment_link.readable_text
Cyber Security Complete Guide

Cyber Security Master Guide

Ø§ÙÙØ±Ø¬Ø¹ Ø§ÙØ´Ø§ÙÙ ÙÙÙÙØ© Ø§ÙØ§ÙØªØØ§Ù

Lec 1 Lec 2-3 Lec 4 Lec 6-7 Lec 9 Lec 10 Lec 11 Lec 12 Lec 13 ð EXAM

Lecture 1: Introduction to Cyber Security
ÙÙØ¯ÙØ©

Why Information Security?

Internet Users (July 2024): 5.45 Billion users
Cybersecurity Losses 2023: $8 Trillion
Expected Losses 2025: $10.5 Trillion

Ø§ÙØ®Ø³Ø§Ø¦Ø± Ø§ÙÙØªÙÙØ¹Ø© ÙÙ Ø§ÙÙØ¬ÙØ§Øª Ø§ÙØ³ÙØ¨Ø±Ø§ÙÙØ© ØªØªØ¬Ø§ÙØ² 10 ØªØ±ÙÙÙÙÙ Ø¯ÙÙØ§Ø± Ø¨ØÙÙÙ 2025Ø ÙÙØ°Ø§ ÙÙØ¶Ø Ø£ÙÙÙØ© Ø§ÙØ£ÙÙ Ø§ÙØ³ÙØ¨Ø±Ø§ÙÙ.

Information Security vs Cyber Security

Aspect | Information Security | Cyber Security
Scope | ALL information (digital + physical) | Digital systems ONLY
Focus | Protecting data in any form | Protecting networks, systems, data from cyber attacks
Example | Locking file cabinets, encryption | Firewalls, IDS, antivirus

Ø£ÙÙ Ø§ÙÙØ¹ÙÙÙØ§Øª: ÙØÙÙ ÙÙ Ø£ÙÙØ§Ø¹ Ø§ÙÙØ¹ÙÙÙØ§Øª (ÙØ±ÙÙØ© + Ø±ÙÙÙØ©).
Ø§ÙØ£ÙÙ Ø§ÙØ³ÙØ¨Ø±Ø§ÙÙ: Ø¬Ø²Ø¡ ÙÙ Ø£ÙÙ Ø§ÙÙØ¹ÙÙÙØ§Øª ÙØ±ÙØ² ÙÙØ· Ø¹ÙÙ ØÙØ§ÙØ© Ø§ÙØ£ÙØ¸ÙØ© Ø§ÙØ±ÙÙÙØ©.

The CIA Triad (Information Security Triad)

Confidentiality (Ø§ÙØ³Ø±ÙØ©): Only authorized users can access data. Tools: Encryption, Access Control

Integrity (Ø§ÙÙØ²Ø§ÙØ©): Data is accurate and not modified. Tools: Hashing (MD5, SHA), Digital Signatures

Availability (Ø§ÙØªÙØ§ÙØ±): Systems are available when needed. Tools: Backups, Redundancy, Load Balancing

Ø§ÙØ³Ø±ÙØ©: Ø§ÙØ£Ø´Ø®Ø§Øµ Ø§ÙÙØµØ±Ø ÙÙÙ ÙÙØ· ÙØ´ÙÙÙØ§ Ø§ÙØ¨ÙØ§ÙØ§Øª.
Ø§ÙÙØ²Ø§ÙØ©: Ø§ÙØ¨ÙØ§ÙØ§Øª ØµØÙØØ© ÙÙØØµÙØ´ ÙÙÙØ§ ØªÙØ§Ø¹Ø¨.
Ø§ÙØªÙØ§ÙØ±: Ø§ÙÙØ¸Ø§Ù Ø´ØºØ§Ù ÙÙØªØ§Ø ÙÙØª ÙØ§ ØªØØªØ§Ø¬Ù.

Lecture 2-3: Authentication & Authorization
Ø§ÙÙØµØ§Ø¯ÙØ© ÙØ§ÙØµÙØ§ØÙØ§Øª

Authentication (Ø§ÙØªØÙÙ ÙÙ Ø§ÙÙÙÙØ©)

Process of verifying "Who are you?"

Type | Description | Example
SFA | Single Factor (one method) | Password only
2FA | Two Factors | Password + OTP
MFA | Multi-Factor (3+ methods) | Password + Phone + Fingerprint

Authentication Factors:
1. Something you KNOW (Password, PIN)
2. Something you HAVE (Phone, Token, Smart Card)
3. Something you ARE (Fingerprint, Face, Retina)

Example: Logging in with username/password, then receiving OTP on phone = 2FA

MFA Ø§ÙØÙÙÙÙ: ÙØ§Ø²Ù ÙÙÙÙ ÙÙ ÙÙØ¹ÙÙ ÙØ®ØªÙÙÙÙ!
Password + PIN = â (Ø§ÙØ§ØªÙÙÙ Know)
Password + Fingerprint = â (Know + Are)

Authorization (Ø§ÙØµÙØ§ØÙØ§Øª)

Process of determining "What can you do?" after being authenticated.

Model | Description
DAC (Discretionary) | Owner decides who gets access. Flexible. Example: Windows file sharing
MAC (Mandatory) | System/Government enforces access by labels (Top Secret). Strictest.
RBAC (Role-Based) | Access based on job role. Most common in companies.

RBAC Example: HR Manager can access HR files, but not Financial data.

DAC: Ø§ÙÙØ§ÙÙ ÙÙ Ø§ÙÙÙ Ø¨ÙØØ¯Ø¯ ÙÙÙ ÙØ¯Ø®Ù (Ø²Ù ÙØ´Ø§Ø±ÙØ© ÙÙÙØ§Øª Ø§ÙÙÙÙØ¯ÙØ²).
MAC: Ø§ÙÙØ¸Ø§Ù Ø¨ÙÙØ±Ø¶ Ø§ÙØµÙØ§ØÙØ§Øª Ø¨ÙØ§Ø¡ Ø¹ÙÙ ÙØ³ØªÙÙ Ø§ÙØ³Ø±ÙØ© (Ø³Ø±Ù ÙÙØºØ§ÙØ©). ØµØ§Ø±Ù Ø¬Ø¯Ø§Ù ÙÙØ¬ÙØ´ ÙØ§ÙØÙÙÙØ©.
RBAC: Ø§ÙØµÙØ§ØÙØ§Øª Ø¹ÙÙ ØØ³Ø¨ ÙØ¸ÙÙØªÙ. ÙØ¯ÙØ± HR ÙØ¯Ø®Ù ÙÙÙØ§Øª HR Ø¨Ø³.

Additional Concepts

Non-repudiation: Sender cannot deny sending a message. Achieved via Digital Signatures.

Auditability: Ability to track and log all actions for compliance. Uses Audit Logs & Audit Trails.

Third-Party Protection: Managing security risks from vendors. Uses SLAs, Vendor Audits.

Non-repudiation Example: A digitally signed contract proves the signer's identity and can't be denied later.

Ø¹Ø¯Ù Ø§ÙØ¥ÙÙØ§Ø±: ÙÙÙÙØ¹Ø´ Ø§ÙÙØ±Ø³Ù ÙÙÙØ± Ø¥ÙÙ Ø¨Ø¹Øª Ø§ÙØ±Ø³Ø§ÙØ© (Ø§ÙØªÙÙÙØ¹ Ø§ÙØ±ÙÙÙ Ø¨ÙØ«Ø¨Øª).
ÙØ§Ø¨ÙÙØ© Ø§ÙØªØ¯ÙÙÙ: Ø§ÙÙØ¯Ø±Ø© Ø¹ÙÙ ØªØªØ¨Ø¹ ÙÙ Ø§ÙØ£ØØ¯Ø§Ø« ÙØ§ÙØ¥Ø¬Ø±Ø§Ø¡Ø§Øª ÙÙ Ø§ÙÙØ¸Ø§Ù.
ØÙØ§ÙØ© Ø§ÙØ·Ø±Ù Ø§ÙØ«Ø§ÙØ«: Ø¥Ø¯Ø§Ø±Ø© ÙØ®Ø§Ø·Ø± Ø§ÙØªØ¹Ø§ÙÙ ÙØ¹ Ø§ÙÙÙØ±Ø¯ÙÙ ÙØ§ÙØ´Ø±ÙØ§Ø¡.

Key Concepts in Cyber Security

Attack Surface: Total entry points an attacker can exploit (APIs, network interfaces).

Vulnerability: A weakness in a system that can be exploited.

Threat: Any potential danger that could exploit a vulnerability.

Risk: Likelihood of threat exploiting vulnerability Ã Impact.

Exploit: Code or technique that takes advantage of a vulnerability.

Defense-in-Depth: Multiple layers of security controls.

Attack Surface: ÙÙ ÙÙØ§Ø· Ø§ÙØ¯Ø®ÙÙ Ø§ÙÙÙ ÙÙÙÙ Ø§ÙÙÙØ§Ø¬Ù ÙØ³ØªØºÙÙØ§.
Vulnerability: Ø«ØºØ±Ø© Ø£Ù ÙÙØ·Ø© Ø¶Ø¹Ù ÙÙ Ø§ÙÙØ¸Ø§Ù.
Threat: Ø£Ù Ø®Ø·Ø± ÙØØªÙÙ ÙØ³ØªØºÙ Ø§ÙØ«ØºØ±Ø©.
Risk: Ø§ØØªÙØ§Ù ØØ¯ÙØ« Ø§ÙØ®Ø·Ø± Ã ØªØ£Ø«ÙØ±Ù.
Exploit: ÙÙØ¯ Ø£Ù Ø·Ø±ÙÙØ© ÙØ§Ø³ØªØºÙØ§Ù Ø§ÙØ«ØºØ±Ø©.
Defense-in-Depth: Ø·Ø¨ÙØ§Øª ÙØªØ¹Ø¯Ø¯Ø© ÙÙ Ø§ÙØÙØ§ÙØ©.

Cyber Security Principles

Least Privilege: Give users minimum access needed for their job.

Separation of Duties: Divide critical tasks between multiple people.

Defense in Depth: Multiple layers of security.

Zero Trust: Never trust, always verify.

Security by Design: Build security into systems from the start.

Ø£ÙÙ ØµÙØ§ØÙØ©: Ø¥Ø¯Ù Ø§ÙÙØ³ØªØ®Ø¯Ù Ø£ÙÙ ØµÙØ§ØÙØ© ÙØØªØ§Ø¬ÙØ§ Ø¨Ø³.
ÙØµÙ Ø§ÙÙÙØ§Ù: ÙØ³Ù Ø§ÙÙÙØ§Ù Ø§ÙØØ³Ø§Ø³Ø© Ø¹ÙÙ Ø£ÙØªØ± ÙÙ Ø´Ø®Øµ.
Ø§ÙØ¯ÙØ§Ø¹ Ø§ÙØ¹ÙÙÙ: Ø·Ø¨ÙØ§Øª ØÙØ§ÙØ© ÙØªØ¹Ø¯Ø¯Ø©.
Ø§ÙØ¹Ø¯Ø§Ù Ø§ÙØ«ÙØ©: ÙØªØ«ÙØ´ ÙÙ ØØ¯Ø ØªØÙÙ Ø¯Ø§ÙÙØ§Ù.
Ø§ÙØ£ÙØ§Ù Ø¨Ø§ÙØªØµÙÙÙ: Ø§Ø¨ÙÙ Ø§ÙØ£ÙØ§Ù ÙÙ Ø§ÙØ¨Ø¯Ø§ÙØ© ÙØ´ Ø¨Ø¹Ø¯ÙÙ.

Frameworks & Standards

NIST: US framework for managing cybersecurity risk.

ISO/IEC 27001: International standard for information security management.

CIS Controls: Prioritized actions to protect against attacks.

NIST: Ø¥Ø·Ø§Ø± Ø¹ÙÙ Ø£ÙØ±ÙÙÙ ÙØ¥Ø¯Ø§Ø±Ø© Ø§ÙÙØ®Ø§Ø·Ø± Ø§ÙØ³ÙØ¨Ø±Ø§ÙÙØ©.
ISO 27001: ÙØ¹ÙØ§Ø± Ø¯ÙÙÙ ÙØ¥Ø¯Ø§Ø±Ø© Ø£ÙÙ Ø§ÙÙØ¹ÙÙÙØ§Øª.
CIS Controls: ÙØ§Ø¦ÙØ© Ø¥Ø¬Ø±Ø§Ø¡Ø§Øª ÙØ±ØªØ¨Ø© ØØ³Ø¨ Ø§ÙØ£ÙÙÙÙØ© ÙÙØÙØ§ÙØ©.

Key Roles in Cyber Security

Security Analyst: Monitors and investigates incidents.

Security Engineer: Designs and implements security solutions.

Penetration Tester: Ethical hacker who simulates attacks.

CISO: Chief Information Security Officer - oversees entire security strategy.

Incident Responder: Responds to and contains security incidents.

ÙØÙÙ Ø£ÙÙÙ: Ø¨ÙØ±Ø§ÙØ¨ ÙÙØÙÙ ÙÙ Ø§ÙØÙØ§Ø¯Ø«.
ÙÙÙØ¯Ø³ Ø£ÙÙÙ: Ø¨ÙØµÙÙ ÙÙÙÙØ° ØÙÙÙ Ø§ÙØÙØ§ÙØ©.
ÙØ®ØªØ¨Ø± Ø§Ø®ØªØ±Ø§Ù: ÙØ§ÙØ± Ø£Ø®ÙØ§ÙÙ Ø¨ÙØØ§ÙÙ Ø§ÙÙØ¬ÙØ§Øª.
CISO: Ø§ÙÙØ³Ø¤ÙÙ Ø§ÙØ£ÙÙ Ø¹Ù Ø§Ø³ØªØ±Ø§ØªÙØ¬ÙØ© Ø§ÙØ£ÙÙ ÙÙ Ø§ÙØ´Ø±ÙØ©.
ÙØ³ØªØ¬ÙØ¨ ÙÙØÙØ§Ø¯Ø«: Ø¨ÙØªØ¹Ø§ÙÙ ÙØ¹ Ø§ÙØÙØ§Ø¯Ø« Ø§ÙØ£ÙÙÙØ© ÙÙØØªÙÙÙØ§.

Legal Issues

GDPR: EU data protection law.

HIPAA: US healthcare data protection.

PCI-DSS: Payment card data security standard.

CCPA: California consumer privacy act.

GDPR: ÙØ§ÙÙÙ ØÙØ§ÙØ© Ø§ÙØ¨ÙØ§ÙØ§Øª Ø§ÙØ£ÙØ±ÙØ¨Ù.
HIPAA: ÙØ§ÙÙÙ ØÙØ§ÙØ© Ø¨ÙØ§ÙØ§Øª Ø§ÙØ±Ø¹Ø§ÙØ© Ø§ÙØµØÙØ© Ø§ÙØ£ÙØ±ÙÙÙ.
PCI-DSS: ÙØ¹ÙØ§Ø± Ø£ÙØ§Ù Ø¨ÙØ§ÙØ§Øª Ø¨Ø·Ø§ÙØ§Øª Ø§ÙØ¯ÙØ¹.
CCPA: ÙØ§ÙÙÙ Ø®ØµÙØµÙØ© Ø§ÙÙØ³ØªÙÙÙ ÙÙ ÙØ§ÙÙÙÙØ±ÙÙØ§.

Lecture 4: Security Technologies & Threat Actors
Ø§ÙØªÙÙÙØ§Øª ÙØ§ÙÙØ§Ø¹ÙÙÙ

Security Technologies

Technology | Description
Encryption | DES (56-bit, insecure), AES (symmetric, widely used), RSA (asymmetric), TLS/SSL (secure data in transit)
Firewall | Packet Filtering (basic) or NGFW (advanced with deep inspection)
IDS | Intrusion Detection - ALERTS only. Signature-based or Anomaly-based.
IPS | Intrusion Prevention - BLOCKS attacks actively.
MFA | OTP, Biometrics (fingerprint, face, retina).
DLP | Data Loss Prevention - Prevents sensitive data from leaving organization.
VPN | Creates encrypted tunnel. IPsec or SSL VPN. Hides IP and encrypts traffic.
IAM | Identity & Access Management. Includes SSO and RBAC.
SIEM | Collects and analyzes security data from multiple sources. Real-time monitoring.
EDR | Endpoint Detection & Response - monitors devices for threats.
SOAR | Security Orchestration, Automation, and Response - automates incident response.

Ø§ÙØªØ´ÙÙØ± (Encryption):
- DES: Ø®ÙØ§Ø±Ø²ÙÙØ© ØªØ´ÙÙØ± ÙØªÙØ§Ø«Ù ÙØ¯ÙÙØ© (56-bit) - ØºÙØ± Ø¢ÙÙØ© ÙÙØ§Ø³ØªØ®Ø¯Ø§ÙØ§Øª Ø§ÙØØ¯ÙØ«Ø©.
- AES: Ø®ÙØ§Ø±Ø²ÙÙØ© ØªØ´ÙÙØ± ÙØªÙØ§Ø«Ù Ø´Ø§Ø¦Ø¹Ø© ÙØ¢ÙÙØ© Ø¬Ø¯Ø§Ù.
- RSA: ØªØ´ÙÙØ± ØºÙØ± ÙØªÙØ§Ø«Ù (ÙÙØªØ§Ø Ø¹Ø§Ù/Ø®Ø§Øµ).
- TLS/SSL: Ø¨Ø±ÙØªÙÙÙÙØ§Øª ÙØªØ£ÙÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª Ø£Ø«ÙØ§Ø¡ Ø§ÙÙÙÙ (HTTPS).

Ø§ÙØ¬Ø¯Ø§Ø± Ø§ÙÙØ§Ø±Ù (Firewall):
- Packet Filtering: ÙÙØØµ Ø§ÙØ¨Ø§ÙØªØ³ ØØ³Ø¨ IP ÙØ§ÙØ¨ÙØ±Øª ÙÙØ· - Ø³Ø±ÙØ¹ ÙÙÙ ÙØØ¯ÙØ¯.
- NGFW (Ø§ÙØ¬ÙÙ Ø§ÙØ¬Ø¯ÙØ¯): ÙÙØ²Ø§Øª ÙØªÙØ¯ÙØ© ÙØ«Ù Deep Packet Inspection ÙIntrusion Prevention ÙÙØ¹Ù Ø§ÙØªØ·Ø¨ÙÙØ§Øª.

IDS (ÙØ¸Ø§Ù ÙØ´Ù Ø§ÙØªØ·ÙÙ): ÙØ±Ø§ÙØ¨ ØØ±ÙØ© Ø§ÙØ´Ø¨ÙØ© ÙÙÙÙØ¨ÙÙ ÙÙØ· Ø¹ÙØ¯ Ø§ÙØªØ´Ø§Ù ÙØ´Ø§Ø· ÙØ´Ø¨ÙÙ. Signature-based: ÙÙØ§Ø±Ù ÙØ¹ Ø£ÙÙØ§Ø· ÙØ¹Ø±ÙÙØ©. Anomaly-based: ÙÙØªØ´Ù Ø§ÙØ§ÙØØ±Ø§ÙØ§Øª Ø¹Ù Ø§ÙØ³ÙÙÙ Ø§ÙØ·Ø¨ÙØ¹Ù.

IPS (ÙØ¸Ø§Ù ÙÙØ¹ Ø§ÙØªØ·ÙÙ): ÙØ±Ø§ÙØ¨ ÙÙÙÙØ¹ Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙØ¹ÙÙØ§Ù Ø¨ØØ¸Ø± Ø§ÙØØ±ÙØ© Ø§ÙÙØ´Ø¨ÙÙØ© ÙÙ Ø§ÙÙÙØª Ø§ÙØÙÙÙÙ. Ø§ÙÙØ±Ù Ø§ÙØ±Ø¦ÙØ³Ù: IDS = Ø¥ÙØ°Ø§Ø±Ø IPS = ØØ§Ø±Ø³ ÙØªØµØ±Ù.

MFA (Ø§ÙÙØµØ§Ø¯ÙØ© ÙØªØ¹Ø¯Ø¯Ø© Ø§ÙØ¹ÙØ§ÙÙ):
- OTP: ÙÙØ¯ ÙÙØ³ØªØ®Ø¯Ù ÙØ±Ø© ÙØ§ØØ¯Ø© ÙÙØ±Ø³Ù ÙÙØ¬ÙØ§Ø².
- Ø§ÙØ¨ÙÙÙØªØ±Ù: Ø¨ØµÙØ© Ø¥ØµØ¨Ø¹Ø Ø§ÙØªØ¹Ø±Ù Ø¹ÙÙ Ø§ÙÙØ¬ÙØ ÙØ³Ø Ø§ÙØ´Ø¨ÙÙØ©.

DLP (ÙÙØ¹ ÙÙØ¯Ø§Ù Ø§ÙØ¨ÙØ§ÙØ§Øª): ÙØ±Ø§ÙØ¨ ÙÙØÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª Ø§ÙØØ³Ø§Ø³Ø© ÙÙ Ø§ÙØªØ³Ø±ÙØ¨. ÙØ¹ÙÙ Ø¨Ù3 ÙØ±Ø§ØÙ: Ø§ÙØ§ÙØªØ´Ø§Ù â ØªØ·Ø¨ÙÙ Ø§ÙØ³ÙØ§Ø³Ø§Øª â Ø§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© ÙÙØÙØ§Ø¯Ø«. ÙØ³ØªØ®Ø¯Ù ØªØÙÙÙ Ø¹ÙÙÙ ÙÙÙØØªÙÙ ÙØ§ÙØªØ´Ø§Ù Ø¨ÙØ§ÙØ§Øª ÙØ«Ù Ø£Ø±ÙØ§Ù Ø§ÙØ¨Ø·Ø§ÙØ§Øª.
- Endpoint DLP: ÙØÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª Ø¹ÙÙ Ø§ÙØ£Ø¬ÙØ²Ø©.
- Network DLP: ÙØ±Ø§ÙØ¨ Ø§ÙØ¨ÙØ§ÙØ§Øª Ø¹Ø¨Ø± Ø§ÙØ´Ø¨ÙØ©.

VPN (Ø§ÙØ´Ø¨ÙØ© Ø§ÙØ®Ø§ØµØ© Ø§ÙØ§ÙØªØ±Ø§Ø¶ÙØ©): ÙÙØ´Ø¦ ÙÙÙ ÙØ´ÙØ± Ø¢ÙÙ Ø¨ÙÙ Ø¬ÙØ§Ø²Ù ÙØ§ÙØ´Ø¨ÙØ©. ÙØ®ÙÙ Ø¹ÙÙØ§Ù IP Ø§ÙØÙÙÙÙ ÙÙØÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª Ø£Ø«ÙØ§Ø¡ Ø§ÙÙÙÙ.
- IPsec: Ø¨Ø±ÙØªÙÙÙÙ ÙØªØ£ÙÙÙ Ø§ØªØµØ§ÙØ§Øª IP.
- SSL VPN: ÙØ³ØªØ®Ø¯Ù SSL ÙØ¥ÙØ´Ø§Ø¡ Ø§ØªØµØ§Ù Ø¢ÙÙ Ø¹Ù Ø¨Ø¹Ø¯.

IAM (Ø¥Ø¯Ø§Ø±Ø© Ø§ÙÙÙÙØ© ÙØ§ÙÙØµÙÙ): ÙØ¯ÙØ± ÙÙÙØ§Øª Ø§ÙÙØ³ØªØ®Ø¯ÙÙÙ ÙÙØªØÙÙ ÙÙ Ø§ÙÙØµÙÙ ÙÙÙÙØ§Ø±Ø¯.
- SSO: ØªØ³Ø¬ÙÙ Ø¯Ø®ÙÙ ÙØ§ØØ¯ ÙÙÙØµÙÙ ÙØ£ÙØ¸ÙØ© ÙØªØ¹Ø¯Ø¯Ø©.
- RBAC: ÙÙØ Ø§ÙÙØµÙÙ Ø¨ÙØ§Ø¡Ù Ø¹ÙÙ Ø¯ÙØ± Ø§ÙÙØ³ØªØ®Ø¯Ù ÙÙ Ø§ÙÙÙØ¸ÙØ©.

SIEM (Ø¥Ø¯Ø§Ø±Ø© ÙØ¹ÙÙÙØ§Øª ÙØ£ØØ¯Ø§Ø« Ø§ÙØ£ÙØ§Ù): ÙØ¬ÙØ¹ ÙÙØÙÙ Ø¨ÙØ§ÙØ§Øª Ø§ÙØ£ÙØ§Ù ÙÙ ÙØµØ§Ø¯Ø± ÙØªØ¹Ø¯Ø¯Ø© (Ø¬Ø¯Ø±Ø§Ù ÙØ§Ø±ÙØ©Ø IDSØ Ø³ÙØ±ÙØ±Ø§Øª). ÙÙÙØ± ÙØ±Ø§ÙØ¨Ø© ÙÙ Ø§ÙÙÙØª Ø§ÙØÙÙÙÙ ÙØªÙØ¨ÙÙØ§Øª ÙÙØ±ÙØ©.

EDR (ÙØ´Ù ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© Ø§ÙÙÙØ§Ø· Ø§ÙØ·Ø±ÙÙØ©): ÙØ±Ø§ÙØ¨ Ø§ÙØ£Ø¬ÙØ²Ø© Ø¨Ø§Ø³ØªÙØ±Ø§Ø± ÙÙÙØ´Ù Ø¹Ù Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙØ§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© ÙÙØ§. ÙØ³ØªØ®Ø¯Ù ØªØÙÙÙ Ø§ÙØ³ÙÙÙ ÙØµÙØ¯ Ø§ÙØªÙØ¯ÙØ¯Ø§Øª Ø§ÙØ§Ø³ØªØ¨Ø§ÙÙ.

SOAR (Ø§ÙØªÙØ³ÙÙ ÙØ§ÙØ£ØªÙØªØ© ÙØ§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© Ø§ÙØ£ÙÙÙØ©): ÙØ¬ÙÙØ¹Ø© Ø£Ø¯ÙØ§Øª ÙØªØØ³ÙÙ Ø¹ÙÙÙØ§Øª Ø§ÙØ£ÙØ§Ù Ø¨Ø£ØªÙØªØ© Ø§ÙÙØ´Ù ÙØ§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© ÙÙØÙØ§Ø¯Ø«.
- Security Orchestration: ÙØ±Ø¨Ø· Ø£Ø¯ÙØ§Øª Ø§ÙØ£ÙØ§Ù Ø§ÙÙØ®ØªÙÙØ© ÙÙØ¹ÙÙ ÙØ¹Ø§Ù.
- Security Automation: ÙØªØ¹Ø§ÙÙ ÙØ¹ Ø§ÙÙÙØ§Ù Ø§ÙÙØªÙØ±Ø±Ø© Ø¨Ø¯ÙÙ ØªØ¯Ø®Ù Ø¨Ø´Ø±Ù.
- Incident Response: ÙØ¨Ø³Ø· ÙÙØØ³Ù Ø§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© ÙÙØÙØ§Ø¯Ø«.
- Threat Intelligence Management: ÙØ¯ÙØ¬ ÙØ¹ÙÙÙØ§Øª Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙÙ Ø§ÙØ¹ÙÙÙØ§Øª.

Types of Threat Actors

Actor | Motivation | Example
Nation-State (APT) | Espionage, Warfare | Stuxnet, SolarWinds, APT1, Fancy Bear
Cybercriminals | Financial gain | REvil, DarkSide (ransomware groups)
Hacktivists | Political/Social causes | Anonymous, LulzSec
Insider Threats | Revenge, Money | Employees stealing IP or sabotaging
Script Kiddies | Fun, Notoriety | Use pre-made tools without understanding
Terrorist Groups | Ideology, Fear | ISIS propaganda
Cyber Mercenaries | Hired for money | Hack-for-hire groups
Organized Crime | Business model | RaaS (Ransomware-as-a-Service)
Competitors | Competitive advantage | Corporate espionage
Vigilantes | Justice | Hacking back criminals

Nation-State (APT) - Ø§ÙØ¯ÙÙ: ÙØ§ÙØ±Ø² Ø£Ù ÙØ¬ÙÙØ¹Ø§Øª ØªØ¹ÙÙ ÙØµØ§ÙØ Ø§ÙØÙÙÙØ§Øª ÙÙØªØ¬Ø³Ø³ Ø§ÙØ¥ÙÙØªØ±ÙÙÙ Ø£Ù Ø§ÙØªØ®Ø±ÙØ¨ Ø£Ù Ø§ÙØØ±Ø¨ Ø§ÙØ³ÙØ¨Ø±Ø§ÙÙØ©. Ø£ÙØ¯Ø§ÙÙÙ: Ø¬ÙØ¹ Ø§ÙÙØ¹ÙÙÙØ§Øª Ø§ÙØ§Ø³ØªØ®Ø¨Ø§Ø±Ø§ØªÙØ© ÙØªØ¹Ø·ÙÙ Ø§ÙØ¨ÙÙØ© Ø§ÙØªØØªÙØ© Ø§ÙØØ±Ø¬Ø©. Ø£ÙØ«ÙØ©: APT1 (Ø§ÙØµÙÙ)Ø Fancy Bear (Ø±ÙØ³ÙØ§)Ø Stuxnet (Ø§Ø³ØªÙØ¯Ù Ø§ÙØ¨Ø±ÙØ§ÙØ¬ Ø§ÙÙÙÙÙ Ø§ÙØ¥ÙØ±Ø§ÙÙ)Ø SolarWinds (Ø§Ø³ØªÙØ¯Ù ÙÙØ§ÙØ§Øª ØÙÙÙÙØ© Ø£ÙØ±ÙÙÙØ©).

Cybercriminals - Ø§ÙÙØ¬Ø±ÙÙÙ Ø§ÙØ¥ÙÙØªØ±ÙÙÙÙÙ: Ø£ÙØ±Ø§Ø¯ Ø£Ù ÙØ¬ÙÙØ¹Ø§Øª ÙÙØ¸ÙØ© ÙØ¯ÙÙÙ Ø§ÙØ±Ø¨Ø Ø§ÙÙØ§ÙÙ. ÙØ³ØªØ®Ø¯ÙÙÙ ØªÙÙÙØ§Øª ÙØªÙÙØ¹Ø© ÙØ³Ø±ÙØ© Ø§ÙØ¨ÙØ§ÙØ§Øª Ø£Ù Ø§ØØªØ¬Ø§Ø² Ø§ÙØ£ÙØ¸ÙØ© ÙÙÙØ¯ÙØ© Ø£Ù Ø§ÙØ§ØØªÙØ§Ù. Ø£ÙØ«ÙØ©: ÙØ¬ÙÙØ¹Ø§Øª Ransomware ÙØ«Ù REvil ÙDarkSideØ Trojans Ø§ÙØ¨ÙÙÙØ© ÙØ«Ù Emotet ÙØ³Ø±ÙØ© Ø¨ÙØ§ÙØ§Øª Ø§ÙØØ³Ø§Ø¨Ø§Øª.

Hacktivists - Ø§ÙÙØ§Ø´Ø·ÙÙ Ø§ÙØ¥ÙÙØªØ±ÙÙÙÙÙ: Ø£ÙØ±Ø§Ø¯ Ø£Ù ÙØ¬ÙÙØ¹Ø§Øª ÙØ®ØªØ±ÙÙÙ ÙØªØ¹Ø²ÙØ² ÙØ¶Ø§ÙØ§ Ø³ÙØ§Ø³ÙØ© Ø£Ù Ø§Ø¬ØªÙØ§Ø¹ÙØ© Ø£Ù Ø£ÙØ¯ÙÙÙÙØ¬ÙØ©. Ø£Ø³Ø§ÙÙØ¨ÙÙ: ØªØ´ÙÙÙ Ø§ÙÙÙØ§ÙØ¹Ø ØªØ³Ø±ÙØ¨ ÙØ¹ÙÙÙØ§Øª ØØ³Ø§Ø³Ø©Ø ÙØ¬ÙØ§Øª DDoS. Ø£ÙØ«ÙØ©: Anonymous (Ø§Ø³ØªÙØ¯ÙØª ØÙÙÙØ§Øª ÙØ´Ø±ÙØ§Øª Ø¯Ø¹ÙØ§Ù ÙØØ±ÙØ© Ø§ÙØªØ¹Ø¨ÙØ± ÙÙÙØ§ÙØØ© Ø§ÙÙØ³Ø§Ø¯)Ø LulzSec.

Insider Threats - Ø§ÙØªÙØ¯ÙØ¯Ø§Øª Ø§ÙØ¯Ø§Ø®ÙÙØ©: ØªØ£ØªÙ ÙÙ Ø£ÙØ±Ø§Ø¯ Ø¯Ø§Ø®Ù Ø§ÙÙÙØ¸ÙØ© (ÙÙØ¸ÙÙÙØ ÙØªØ¹Ø§ÙØ¯ÙÙØ Ø´Ø±ÙØ§Ø¡) ÙØ¯ÙÙÙ ÙØµÙÙ ÙØµØ±Ø ÙÙØ¹ÙÙÙØ§Øª ØØ³Ø§Ø³Ø© ÙÙÙÙÙ ÙØ³ÙØ¦ÙÙ Ø§Ø³ØªØ®Ø¯Ø§ÙÙ ÙØ£ØºØ±Ø§Ø¶ Ø®Ø¨ÙØ«Ø©. Ø£ÙØ«ÙØ©: Ø³Ø±ÙØ© Ø§ÙÙÙÙÙØ© Ø§ÙÙÙØ±ÙØ© Ø£Ù ØªØ®Ø±ÙØ¨ Ø§ÙØ£ÙØ¸ÙØ© ÙØ¨Ù ØªØ±Ù Ø§ÙØ´Ø±ÙØ©. ØºÙØ± ÙØªØ¹ÙØ¯: ÙÙØ¸Ù ÙÙØ¹ Ø¶ØÙØ© ÙÙØ¬ÙÙ ØªØµÙØ¯.

Script Kiddies - Ø§ÙÙØ¨ØªØ¯Ø¦ÙÙ: ÙØ§ÙØ±Ø² ØºÙØ± ÙØØªØ±ÙÙÙ ÙØ³ØªØ®Ø¯ÙÙÙ Ø£Ø¯ÙØ§Øª ÙØ³ÙØ±ÙØ¨ØªØ§Øª Ø¬Ø§ÙØ²Ø© Ø¯ÙÙ ÙÙÙ ØÙÙÙÙ ÙÙÙÙÙØ© Ø¹ÙÙÙØ§. ÙØ¨ØØ«ÙÙ Ø¹Ù Ø£ÙØ¯Ø§Ù Ø³ÙÙØ© Ø¨Ø¯Ø§ÙØ¹ Ø§ÙÙØªØ¹Ø© Ø£Ù Ø§ÙØ´ÙØ±Ø©. Ø£ÙØ«ÙØ©: ØªØ´ÙÙÙ ÙÙØ§ÙØ¹ ØµØºÙØ±Ø©Ø ÙØ¬ÙØ§Øª DDoS Ø¨Ø³ÙØ·Ø© Ø¨Ø§Ø³ØªØ®Ø¯Ø§Ù LOIC Ø£Ù Ø£Ø¯ÙØ§Øª Metasploit Ø¬Ø§ÙØ²Ø©.

Terrorist Groups - Ø§ÙÙØ¬ÙÙØ¹Ø§Øª Ø§ÙØ¥Ø±ÙØ§Ø¨ÙØ©: ÙÙØ¸ÙØ§Øª Ø¥Ø±ÙØ§Ø¨ÙØ© ÙØ¯ ØªØ´Ø§Ø±Ù ÙÙ ÙØ¬ÙØ§Øª Ø¥ÙÙØªØ±ÙÙÙØ© ÙÙØªØ±ÙÙØ¬ ÙØ£ÙØ¯Ø§ÙÙÙ Ø§ÙØ£ÙØ¯ÙÙÙÙØ¬ÙØ© Ø£Ù Ø§ÙØªØ³Ø¨Ø¨ ÙÙ Ø§ÙØ®ÙÙ ÙØ§ÙØ¯ÙØ§Ø± Ø£Ù Ø¬ÙØ¹ Ø§ÙÙØ¹ÙÙÙØ§Øª Ø§ÙØ§Ø³ØªØ®Ø¨Ø§Ø±Ø§ØªÙØ©. Ø£ÙØ«ÙØ©: ISIS ÙØ¹Ø±ÙÙØ© Ø¨Ø§ÙØ¯Ø¹Ø§ÙØ© ÙØ¬ÙÙØ¯ Ø§ÙØªØ¬ÙÙØ¯ Ø¹Ø¨Ø± Ø§ÙØ¥ÙØªØ±ÙØª ÙØ¨Ø¹Ø¶ ØªØ´ÙÙÙØ§Øª Ø§ÙÙÙØ§ÙØ¹.

Cyber Mercenaries - Ø§ÙÙØ±ØªØ²ÙØ© Ø§ÙØ¥ÙÙØªØ±ÙÙÙÙÙ: ÙØ§ÙØ±Ø² Ø£Ù ÙØ¬ÙÙØ¹Ø§Øª ÙÙØ¯ÙÙÙ Ø®Ø¯ÙØ§ØªÙÙ ÙØ£Ø¹ÙÙ ÙØ²Ø§ÙØ¯. ÙØ¯ ÙØ¹ÙÙÙÙ ÙØÙÙÙØ§Øª Ø£Ù Ø´Ø±ÙØ§Øª Ø£Ù ÙØ¬ÙÙØ¹Ø§Øª Ø¥Ø¬Ø±Ø§ÙÙØ© ÙÙØªØ¬Ø³Ø³ Ø§ÙØ¥ÙÙØªØ±ÙÙÙ Ø£Ù Ø§ÙØªØ®Ø±ÙØ¨ Ø£Ù Ø§ÙØ§ØØªÙØ§Ù. Ø£ÙØ«ÙØ©: ÙØ¬ÙÙØ¹Ø§Øª Hack-for-Hire Ø§ÙØ®Ø§ØµØ©.

Organized Crime Syndicates - Ø¹ØµØ§Ø¨Ø§Øª Ø§ÙØ¬Ø±ÙÙØ© Ø§ÙÙÙØ¸ÙØ©: ÙÙØ¸ÙØ§Øª Ø¥Ø¬Ø±Ø§ÙÙØ© ÙØ¨ÙØ±Ø© ÙÙÙØ¸ÙØ© ØªÙØ§Ø±Ø³ Ø§ÙØ¬Ø±ÙÙØ© Ø§ÙØ¥ÙÙØªØ±ÙÙÙØ© ÙÙÙÙØ°Ø¬ Ø¹ÙÙ. ØªØ¹ÙÙ Ø¨Ø·Ø±ÙÙØ© ÙÙØ¸ÙØ© ÙÙØºØ§ÙØ© ÙØ«Ù Ø´Ø±ÙØ© Ø¨Ø£ÙØ³Ø§Ù ÙÙØ§Ø®ØªØ±Ø§Ù ÙØºØ³ÙÙ Ø§ÙØ£ÙÙØ§Ù. Ø£ÙØ«ÙØ©: Ransomware-as-a-Service (RaaS) - ÙØ¬ÙÙØ¹Ø§Øª ØªÙØ¯Ù Ø£Ø¯ÙØ§Øª ÙØ¯ÙØ© ÙÙØ´Ø±ÙØ§Ø¡ ÙÙØ´ÙÙØ§ Ø§ÙÙØ¬ÙØ§Øª.

Competitors - Ø§ÙÙÙØ§ÙØ³ÙÙ: ÙÙ Ø¨Ø¹Ø¶ Ø§ÙØØ§ÙØ§ØªØ ÙØ¯ ÙØ´Ø§Ø±Ù ÙÙØ§ÙØ³ÙÙ ÙÙ Ø£ÙØ´Ø·Ø© Ø¥ÙÙØªØ±ÙÙÙØ© ØºÙØ± Ø£Ø®ÙØ§ÙÙØ© ÙØ«Ù Ø§ÙØªØ¬Ø³Ø³ Ø§ÙÙØ¤Ø³Ø³Ù ÙÙØØµÙÙ Ø¹ÙÙ ÙÙØ²Ø© ØªÙØ§ÙØ³ÙØ© Ø¨Ø³Ø±ÙØ© Ø§ÙÙÙÙÙØ© Ø§ÙÙÙØ±ÙØ© Ø£Ù Ø§ÙØ£Ø³Ø±Ø§Ø± Ø§ÙØªØ¬Ø§Ø±ÙØ© Ø£Ù ØªØ®Ø±ÙØ¨ Ø§ÙØ¹ÙÙÙØ§Øª. Ø£ÙØ«ÙØ©: ØªÙØ¸ÙÙ ÙØ§ÙØ±Ø² ÙØ³Ø±ÙØ© ØªØµÙÙÙØ§Øª ÙÙØªØ¬Ø§Øª Ø³Ø±ÙØ© Ø£Ù Ø¨ÙØ§ÙØ§Øª Ø§ÙØ¹ÙÙØ§Ø¡.

Vigilantes - Ø§ÙÙÙØ¸ÙÙ: ÙØ§Ø¹ÙÙÙ ÙØ¹ÙÙÙÙ Ø®Ø§Ø±Ø¬ Ø§ÙÙØ§ÙÙÙ ÙÙÙÙÙ ÙØ¯Ø¹ÙÙ Ø§ÙØ¹ÙÙ ÙÙ Ø£Ø¬Ù Ø§ÙØµØ§ÙØ Ø§ÙØ¹Ø§Ù. ÙØ¯ ÙÙØ´ÙÙÙ Ø§ÙØ«ØºØ±Ø§Øª Ø£Ù Ø®Ø±ÙÙØ§Øª Ø§ÙØ¨ÙØ§ÙØ§ØªØ ØºØ§ÙØ¨Ø§Ù ÙØ³ØªÙØ¯ÙÙÙ Ø§ÙÙØ¬Ø±ÙÙÙ Ø£Ù Ø§ÙÙÙØ¸ÙØ§Øª ØºÙØ± Ø§ÙØ£Ø®ÙØ§ÙÙØ©. Ø£ÙØ«ÙØ©: ÙØ´Ù Ø¹ÙÙÙØ§Øª Ø§ÙØ§ØØªÙØ§ÙØ Ø¹ÙÙÙØ§Øª Ø§ÙØ§Ø®ØªØ±Ø§Ù Ø§ÙØ¹ÙØ³Ù Ø¶Ø¯ Ø§ÙÙØ¬Ø±ÙÙÙ.

Security Definitions

Hack Value: Perceived worth/attractiveness of a target to hackers.

Daisy-chaining: Compromising multiple systems in sequence, using each to attack the next.

Tokenization: Replacing sensitive data with non-sensitive placeholders (tokens).

CTI: Cyber Threat Intelligence - collecting info about threats.

Hack Value: ÙÙÙØ© ÙØ¬Ø§Ø°Ø¨ÙØ© Ø§ÙÙØ¯Ù ÙÙÙØ§ÙØ±Ø².
Daisy-chaining: Ø§Ø®ØªØ±Ø§Ù Ø£ÙØ¸ÙØ© ÙØªØªØ§ÙÙØ©Ø ÙÙ ÙØ¸Ø§Ù ÙÙØµÙ ÙÙØªØ§ÙÙ.
Tokenization: Ø§Ø³ØªØ¨Ø¯Ø§Ù Ø§ÙØ¨ÙØ§ÙØ§Øª Ø§ÙØØ³Ø§Ø³Ø© Ø¨Ø±ÙÙØ² ÙØ´ ÙÙÙØ§ ÙÙÙØ©.
CTI: Ø¬ÙØ¹ ÙØ¹ÙÙÙØ§Øª Ø¹Ù Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙØªØØ³ÙÙ Ø§ÙØ¯ÙØ§Ø¹.

Lecture 6-7: Security Controls
Ø§ÙØ¶ÙØ§Ø¨Ø· Ø§ÙØ£ÙÙÙØ©

1. Administrative Controls (Ø¥Ø¯Ø§Ø±ÙØ©)

Security Policies: AUP (Acceptable Use Policy), Data Classification Policy

Security Awareness Training: Teaching employees about phishing, passwords

Incident Response Planning: Detection, Containment, Investigation, Recovery

Risk Assessment: Identify threats, analyze impacts, implement mitigation

Access Control Procedures: Least privilege, Separation of duties

Hiring/Termination Policies: Background checks, deactivating accounts

Audit & Monitoring: Reviewing logs, ensuring compliance

Third-Party Risk Management: Vendor security assessments

Ø³ÙØ§Ø³Ø§Øª Ø§ÙØ£ÙØ§Ù: AUP (Ø³ÙØ§Ø³Ø© Ø§ÙØ§Ø³ØªØ®Ø¯Ø§Ù Ø§ÙÙÙØ¨ÙÙ) - ØªØØ¯Ø¯ ÙØ§ ÙÙÙÙ ÙÙØ§ ÙØ§ ÙÙÙÙ ÙÙÙÙØ¸ÙÙÙ ÙØ¹ÙÙ Ø¨ÙÙØ§Ø±Ø¯ Ø§ÙØ´Ø±ÙØ©. Data Classification Policy (Ø³ÙØ§Ø³Ø© ØªØµÙÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª) - ÙÙØ§Ø¹Ø¯ ÙØªØµÙÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª ØØ³Ø¨ Ø§ÙØØ³Ø§Ø³ÙØ©.

Ø§ÙØªÙØ¹ÙØ© Ø§ÙØ£ÙÙÙØ©: ØªØ¯Ø±ÙØ¨ Ø§ÙÙÙØ¸ÙÙÙ Ø¹ÙÙ Ø§ÙØªØ´Ø§Ù Ø±Ø³Ø§Ø¦Ù Ø§ÙØªØµÙØ¯ (Phishing)Ø ÙÙÙ ÙØ³Ø¤ÙÙÙØ§Øª ØÙØ§ÙØ© Ø§ÙØ¨ÙØ§ÙØ§ØªØ ÙØ§ØªØ¨Ø§Ø¹ Ø£ÙØ¶Ù Ø§ÙÙÙØ§Ø±Ø³Ø§Øª (Ø¨Ø§Ø³ÙØ±Ø¯Ø§Øª ÙÙÙØ©).

Ø®Ø·Ø© Ø§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© ÙÙØÙØ§Ø¯Ø«: Ø§ÙØ®Ø·ÙØ§Øª Ø¹ÙØ¯ ØØ¯ÙØ« Ø§Ø®ØªØ±Ø§Ù: Ø§ÙØ§ÙØªØ´Ø§Ù ÙØ§ÙØ¥Ø¨ÙØ§Øº â Ø§ÙØ§ØØªÙØ§Ø¡ ÙØ§ÙØªØÙÙÙ â Ø§ÙØ§Ø³ØªØ±Ø¯Ø§Ø¯ ÙØ§Ø³ØªØ®ÙØ§Øµ Ø§ÙØ¯Ø±ÙØ³.

ØªÙÙÙÙ Ø§ÙÙØ®Ø§Ø·Ø±: ØªØØ¯ÙØ¯ Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙØ§ÙØ«ØºØ±Ø§ØªØ ØªØÙÙÙ Ø§ÙØªØ£Ø«ÙØ±Ø§Øª Ø§ÙÙØØªÙÙØ©Ø ÙØªÙÙÙØ° Ø§Ø³ØªØ±Ø§ØªÙØ¬ÙØ§Øª Ø§ÙØªØ®ÙÙÙ.

Ø¥Ø¬Ø±Ø§Ø¡Ø§Øª Ø§ÙØªØÙÙ ÙÙ Ø§ÙÙØµÙÙ: Least Privilege (Ø£ÙÙ ØµÙØ§ØÙØ©) - Ø§ÙÙØ³ØªØ®Ø¯Ù ÙØ£Ø®Ø° ÙÙØ· Ø§ÙØµÙØ§ØÙØ§Øª Ø§ÙÙØ§Ø²ÙØ© ÙØ¹ÙÙÙ. Separation of Duties (ÙØµÙ Ø§ÙÙÙØ§Ù) - ØªÙØ³ÙÙ Ø§ÙÙÙØ§Ù Ø§ÙØØ±Ø¬Ø© Ø¨ÙÙ Ø¹Ø¯Ø© ÙÙØ¸ÙÙÙ ÙÙÙØ¹ Ø§ÙØ§ØØªÙØ§Ù.

Ø³ÙØ§Ø³Ø§Øª Ø§ÙØªÙØ¸ÙÙ ÙØ§ÙØ¥ÙÙØ§Ø¡: Ø¹ÙØ¯ Ø§ÙØªÙØ¸ÙÙ: ÙØØµ Ø§ÙØ®ÙÙÙØ© ÙØ§ÙØªØÙÙ ÙÙ Ø§ÙÙØ¤ÙÙØ§Øª. Ø¹ÙØ¯ Ø§ÙØ¥ÙÙØ§Ø¡: ØªØ¹Ø·ÙÙ Ø§ÙØØ³Ø§Ø¨Ø§Øª ÙÙØ±Ø§ÙØ Ø§Ø³ØªØ±Ø¯Ø§Ø¯ Ø§ÙØ£Ø¬ÙØ²Ø©Ø ÙÙØ±Ø§Ø¬Ø¹Ø© Ø³Ø¬ÙØ§Øª Ø§ÙÙØµÙÙ.

Ø§ÙØªØ¯ÙÙÙ ÙØ§ÙÙØ±Ø§ÙØ¨Ø©: ÙØ±Ø§Ø¬Ø¹Ø© Ø³Ø¬ÙØ§Øª Ø§ÙÙØµÙÙ Ø¨Ø§ÙØªØ¸Ø§ÙØ ÙØ±Ø§ÙØ¨Ø© Ø§ÙØ£ÙØ´Ø·Ø© Ø§ÙØ£ÙÙÙØ©Ø ÙØ§ÙØªØ£ÙØ¯ ÙÙ Ø§ÙØ§ÙØªØ«Ø§Ù ÙÙÙØªØ·ÙØ¨Ø§Øª Ø§ÙÙØ§ÙÙÙÙØ©.

Ø¥Ø¯Ø§Ø±Ø© ÙØ®Ø§Ø·Ø± Ø§ÙØ·Ø±Ù Ø§ÙØ«Ø§ÙØ«: ØªÙÙÙÙ Ø£ÙØ§Ù Ø§ÙÙÙØ±Ø¯ÙÙØ Ø¹ÙÙØ¯ SLA ØªØªØ¶ÙÙ Ø¨ÙÙØ¯ Ø£ÙÙÙØ©Ø ÙÙØ±Ø§Ø¬Ø¹Ø§Øª Ø¯ÙØ±ÙØ©.

2. Technical/Logical Controls (ØªÙÙÙØ©)

Access Control Systems: RBAC, MAC, DAC

Encryption: AES, SSL/TLS, E2EE

Firewalls: Packet Filtering, Stateful, NGFW

IDS/IPS: Host-based (HIDS), Network-based (NIDS)

Antivirus: Signature-based, Heuristic analysis

MFA: Something you know/have/are

VPN: Encrypted tunnel for remote access

DLP: Prevents data exfiltration

Network Segmentation: VLANs, subnetting

Patch Management: Regular software updates

SIEM: Centralized log analysis

Application Whitelisting: Only approved apps can run

Backup & Recovery: Regular backups

Endpoint Security: EDR, MDM

Ø£ÙØ¸ÙØ© Ø§ÙØªØÙÙ ÙÙ Ø§ÙÙØµÙÙ: RBAC (ØØ³Ø¨ Ø§ÙØ¯ÙØ±) - MAC (Ø¥Ø¬Ø¨Ø§Ø±Ù Ø¨ØªØ³ÙÙØ§Øª Ø³Ø±ÙØ©) - DAC (ØªÙØ¯ÙØ±Ù ÙØØ¯Ø¯Ù Ø§ÙÙØ§ÙÙ).

Ø§ÙØªØ´ÙÙØ±: AES - Ø®ÙØ§Ø±Ø²ÙÙØ© ØªØ´ÙÙØ± ÙØªÙØ§Ø«Ù Ø´Ø§Ø¦Ø¹Ø© ÙØ¢ÙÙØ©. SSL/TLS - Ø¨Ø±ÙØªÙÙÙÙØ§Øª ÙØªØ£ÙÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª Ø£Ø«ÙØ§Ø¡ Ø§ÙÙÙÙ Ø¹Ø¨Ø± Ø§ÙØ¥ÙØªØ±ÙØª. E2EE (Ø§ÙØªØ´ÙÙØ± ÙÙ Ø·Ø±Ù ÙØ·Ø±Ù) - ÙÙØ· Ø§ÙÙØ±Ø³Ù ÙØ§ÙÙØ³ØªÙØ¨Ù ÙÙØ¯Ø±ÙÙ ÙÙØ±Ø£ÙØ§ Ø§ÙØ±Ø³Ø§ÙØ©.

Ø§ÙØ¬Ø¯Ø±Ø§Ù Ø§ÙÙØ§Ø±ÙØ©: Packet Filtering - ÙÙØØµ ÙÙ Ø¨Ø§ÙØª ÙÙØ³ÙØ Ø£Ù ÙÙÙØ¹ ØØ³Ø¨ ÙÙØ§Ø¹Ø¯ ÙØØ¯Ø¯Ø©. Stateful - ÙØªØªØ¨Ø¹ ØØ§ÙØ© Ø§ÙØ§ØªØµØ§ÙØ§Øª. NGFW (Ø§ÙØ¬ÙÙ Ø§ÙØ¬Ø¯ÙØ¯) - ÙÙØ²Ø§Øª ÙØªÙØ¯ÙØ© ÙØ«Ù ÙØ¹Ù Ø§ÙØªØ·Ø¨ÙÙØ§Øª ÙÙÙØ¹ Ø§ÙØ§Ø®ØªØ±Ø§ÙØ§Øª.

IDS/IPS: IDS (ÙØ´Ù) - ÙÙØ¨Ù ÙÙØ· Ø¹ÙØ¯ ÙØ¬ÙØ¯ ÙØ´Ø§Ø· ÙØ´Ø¨ÙÙ. IPS (ÙÙØ¹) - ÙØØ¸Ø± Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙØ¹ÙÙØ§Ù. HIDS (Ø¹ÙÙ Ø§ÙØ¬ÙØ§Ø²) - NIDS (Ø¹ÙÙ Ø§ÙØ´Ø¨ÙØ©).

ÙØ¶Ø§Ø¯ Ø§ÙÙÙØ±ÙØ³Ø§Øª: Signature-based - ÙÙØªØ´Ù Ø§ÙØ¨Ø±Ø§ÙØ¬ Ø§ÙØ®Ø¨ÙØ«Ø© Ø¨ÙÙØ§Ø±ÙØªÙØ§ ÙØ¹ Ø£ÙÙØ§Ø· ÙØ¹Ø±ÙÙØ©. Heuristic - ÙØÙÙ Ø§ÙØ³ÙÙÙ ÙØ§ÙØªØ´Ø§Ù ØªÙØ¯ÙØ¯Ø§Øª Ø¬Ø¯ÙØ¯Ø©.

MFA: Ø´ÙØ¡ ØªØ¹Ø±ÙÙ (Ø¨Ø§Ø³ÙØ±Ø¯) + Ø´ÙØ¡ ØªÙÙÙÙ (ÙØ§ØªÙ) + Ø´ÙØ¡ Ø£ÙØª (Ø¨ØµÙØ©).

VPN: ÙÙØ´Ø¦ ÙÙÙ ÙØ´ÙØ± Ø¨ÙÙ Ø¬ÙØ§Ø²Ù ÙØ§ÙØ´Ø¨ÙØ©Ø ÙØ®ÙÙ Ø§ÙÙ IP ÙÙØÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª Ø£Ø«ÙØ§Ø¡ Ø§ÙÙÙÙ. IPsec Ù SSL VPN ÙÙØ§ Ø£Ø´ÙØ± Ø§ÙØ¨Ø±ÙØªÙÙÙÙØ§Øª.

DLP: ÙØ±Ø§ÙØ¨ ÙÙØªØÙÙ ÙÙ ØªØ¯ÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª Ø§ÙØØ³Ø§Ø³Ø©Ø ÙÙÙØ¹ Ø¥Ø±Ø³Ø§ÙÙØ§ Ø¨Ø§ÙØ¥ÙÙÙÙ Ø£Ù ÙØ³Ø®ÙØ§ Ø¹ÙÙ USB.

Network Segmentation: ØªÙØ³ÙÙ Ø§ÙØ´Ø¨ÙØ© ÙØ£Ø¬Ø²Ø§Ø¡ Ø£ØµØºØ± ÙØ¹Ø²ÙÙØ© Ø¨Ø§Ø³ØªØ®Ø¯Ø§Ù VLANs Ùsubnetting ÙØªÙÙÙÙ Ø³Ø·Ø Ø§ÙÙØ¬ÙÙ.

Patch Management: ØªØØ¯ÙØ« Ø§ÙØ¨Ø±Ø§ÙØ¬ ÙØ§ÙØ£ÙØ¸ÙØ© Ø¨Ø§ÙØªØ¸Ø§Ù ÙØ¥ØµÙØ§Ø Ø§ÙØ«ØºØ±Ø§Øª Ø§ÙÙØ¹Ø±ÙÙØ©.

SIEM: ÙØ¬ÙØ¹ ÙÙØÙÙ Ø¨ÙØ§ÙØ§Øª Ø§ÙØ£ÙØ§Ù ÙÙ ÙØµØ§Ø¯Ø± ÙØªØ¹Ø¯Ø¯Ø© ÙÙÙØ´Ù Ø¹Ù Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙÙ Ø§ÙÙÙØª Ø§ÙØÙÙÙÙ.

Application Whitelisting: ÙØ§Ø¦ÙØ© Ø¨Ø§ÙØ¨Ø±Ø§ÙØ¬ Ø§ÙÙØ³ÙÙØ ØªØ´ØºÙÙÙØ§ ÙÙØ·Ø Ø£Ù Ø¨Ø±ÙØ§ÙØ¬ Ø®Ø§Ø±Ø¬ Ø§ÙÙØ§Ø¦ÙØ© ÙØØ¸ÙØ±.

Backup & Recovery: ÙØ³Ø® Ø§ØØªÙØ§Ø·Ù ÙÙØªØ¸Ù ÙÙØ¨ÙØ§ÙØ§Øª Ø§ÙÙÙÙØ©Ø ÙØ¶ÙÙ Ø§Ø³ØªØ¹Ø§Ø¯ØªÙØ§ ÙÙ ØØ§ÙØ© Ø§ÙÙÙØ§Ø±Ø« Ø£Ù Ø§ÙÙ Ransomware.

Endpoint Security: EDR (ÙØ´Ù ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© Ø§ÙÙÙØ§Ø· Ø§ÙØ·Ø±ÙÙØ©) - ÙØ±Ø§ÙØ¨ Ø§ÙØ£Ø¬ÙØ²Ø© ÙÙÙØªØ´Ù Ø§ÙØªÙØ¯ÙØ¯Ø§Øª. MDM (Ø¥Ø¯Ø§Ø±Ø© Ø§ÙØ£Ø¬ÙØ²Ø© Ø§ÙÙØÙÙÙØ©) - ÙØ£ÙÙ ÙÙØ¯ÙØ± Ø§ÙÙÙØ§ØªÙ Ø§ÙØ°ÙÙØ©.

3. Physical Controls (ÙÙØ²ÙØ§Ø¦ÙØ©)

Access Control: Locks, Keycards, RFID, Biometrics, Turnstiles

Surveillance: CCTV, Motion Sensors, Alarms

Environmental: Fire suppression, HVAC, UPS/Generators

Security Guards: Human monitoring and patrol

Perimeter Security: Fences, Barriers, Bollards, Security Lighting

Mantraps: Two interlocking doors to prevent tailgating

Safes & Secure Cabinets: For sensitive documents

Asset Tracking: RFID, GPS for devices

Access Logs: Records of who accessed what areas

Mantrap Example: Small room with two doors - only one opens at a time. Prevents tailgating.

Ø¢ÙÙØ§Øª Ø§ÙØªØÙÙ ÙÙ Ø§ÙÙØµÙÙ: Ø§ÙØ£ÙÙØ§Ù ÙØ§ÙÙÙØ§ØªÙØ (Ø£Ø¨Ø³Ø· Ø´ÙÙ) - Ø£ÙØ¸ÙØ© Ø§ÙØªØÙÙ Ø§ÙØ¥ÙÙØªØ±ÙÙÙ EACS (ÙØ±ÙØªØ RFIDØ PIN) - Ø§ÙØ¨ÙÙÙØªØ±Ù (Ø¨ØµÙØ©Ø ÙØ¬ÙØ ÙØ²ØÙØ©).

Ø£ÙØ¸ÙØ© Ø§ÙÙØ±Ø§ÙØ¨Ø©: CCTV - ÙØ§ÙÙØ±Ø§Øª ØªØ³Ø¬Ù Ø§ÙÙØ´Ø§Ø· ÙØ¹ ÙÙØ²Ø§Øª ÙØ«Ù Ø§ÙØ±Ø¤ÙØ© Ø§ÙÙÙÙÙØ© ÙØ§ÙØªØ´Ø§Ù Ø§ÙØØ±ÙØ©. ØØ³Ø§Ø³Ø§Øª Ø§ÙØØ±ÙØ© - ØªÙØªØ´Ù Ø£Ù ØØ±ÙØ© ÙØªÙØ¹Ù Ø§ÙØ¥ÙØ°Ø§Ø±Ø§Øª. Ø£ÙØ¸ÙØ© Ø§ÙØ¥ÙØ°Ø§Ø± - ØªÙØ¨Ù ØØ±Ø§Ø³ Ø§ÙØ£ÙÙ ÙØªØ³Ø¬Ù Ø§ÙÙÙØ¯ÙÙ ØªÙÙØ§Ø¦ÙØ§Ù.

Ø§ÙØ¶ÙØ§Ø¨Ø· Ø§ÙØ¨ÙØ¦ÙØ©: Ø£ÙØ¸ÙØ© Ø¥Ø·ÙØ§Ø¡ Ø§ÙØØ±ÙÙ (FM-200 ÙØºØ±Ù Ø§ÙØ³ÙØ±ÙØ±Ø§Øª ÙØ£ÙÙØ§ ÙØ§ ØªØ¶Ø± Ø§ÙÙØ¹Ø¯Ø§Øª) - HVAC (ØªØªØÙÙ ÙÙ Ø§ÙØØ±Ø§Ø±Ø© ÙØ§ÙØ±Ø·ÙØ¨Ø© ÙÙÙØ¹ ØªÙÙ Ø§ÙØ£Ø¬ÙØ²Ø©) - UPS ÙØ§ÙÙÙÙØ¯Ø§Øª (Ø·Ø§ÙØ© Ø§ØØªÙØ§Ø·ÙØ© ÙØ¶ÙØ§Ù Ø§Ø³ØªÙØ±Ø§Ø± Ø§ÙØ¹ÙÙ).

ØØ±Ø§Ø³ Ø§ÙØ£ÙÙ: ÙØ¬ÙØ¯ Ø¨Ø´Ø±Ù ÙÙÙØ±Ø§ÙØ¨Ø© ÙØ§ÙØ¯ÙØ±ÙØ§Øª ÙØ§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© ÙÙØÙØ§Ø¯Ø«Ø ÙØªØÙÙÙÙ ÙÙ ÙÙÙØ§Øª Ø§ÙØ¯Ø§Ø®ÙÙÙ.

Ø£ÙÙ Ø§ÙÙØÙØ·: Ø§ÙØ£Ø³ÙØ§Ø± - ØØ§Ø¬Ø² ÙÙØ²ÙØ§Ø¦Ù. Ø§ÙØÙØ§Ø¬Ø² ÙØ§ÙØ¨ÙÙØ§Ø±Ø¯Ø§Øª - ØªÙÙØ¹ Ø¯Ø®ÙÙ Ø§ÙÙØ±ÙØ¨Ø§Øª (ÙØ¬ÙØ§Øª Ø§ÙØ¯ÙØ³). Ø¥Ø¶Ø§Ø¡Ø© Ø£ÙÙÙØ© - ØªØ±Ø¯Ø¹ Ø§ÙÙØªØ³ÙÙÙÙ ÙØªØ³Ø§Ø¹Ø¯ ÙÙ Ø§ÙÙØ´Ù.

Mantrap: ØºØ±ÙØ© ØµØºÙØ±Ø© Ø¨Ø¨Ø§Ø¨ÙÙ ÙØªØ´Ø§Ø¨ÙÙÙØ ÙØ§ ÙÙØªØ Ø¨Ø§Ø¨ Ø¥ÙØ§ Ø¥Ø°Ø§ Ø£ØºÙÙ Ø§ÙØ¢Ø®Ø±. ØªÙÙØ¹ Tailgating (Ø¯Ø®ÙÙ Ø´Ø®Øµ ØºÙØ± ÙØµØ±Ø Ø®ÙÙ Ø´Ø®Øµ ÙØµØ±Ø).

Ø§ÙØ®Ø²Ø§Ø¦Ù ÙØ§ÙÙØ¨Ø§Ø¦Ù Ø§ÙØ¢ÙÙØ©: ÙØªØ®Ø²ÙÙ Ø§ÙÙØ«Ø§Ø¦Ù Ø§ÙØØ³Ø§Ø³Ø© ÙØ§ÙÙØ³Ø® Ø§ÙØ§ØØªÙØ§Ø·ÙØ©Ø ÙÙØ§ÙÙØ© ÙÙØØ±ÙÙ ÙØ§ÙØ¹Ø¨Ø«.

ØªØªØ¨Ø¹ Ø§ÙØ£ØµÙÙ: RFID ÙGPS ÙØªØªØ¨Ø¹ Ø§ÙØ£Ø¬ÙØ²Ø© ÙØ«Ù Ø§ÙÙØ§Ø¨ØªÙØ¨Ø§Øª ÙØ§ÙØ³ÙØ±ÙØ±Ø§Øª ÙÙÙØ¹ Ø§ÙØ³Ø±ÙØ© Ø£Ù Ø§ÙØ¶ÙØ§Ø¹.

Ø³Ø¬ÙØ§Øª Ø§ÙÙØµÙÙ: ØªØ³Ø¬ÙÙ ÙÙ Ø¯Ø®Ù Ø£Ù ÙÙØ·ÙØ© ÙÙØªÙ ÙÙÙØ§Ø°Ø§ (Ø¥ÙÙØªØ±ÙÙÙ Ø£Ù ÙØ¯ÙÙ).

Ø£ÙØ¸ÙØ© Ø§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© ÙÙØ·ÙØ§Ø±Ø¦: Ø®Ø·Ø· Ø¥Ø®ÙØ§Ø¡Ø ÙØ®Ø§Ø±Ø¬ Ø·ÙØ§Ø±Ø¦Ø ÙØØ·Ø§Øª Ø¥Ø³Ø¹Ø§ÙØ ØªØ¯Ø±ÙØ¨Ø§Øª ÙÙØªØ¸ÙØ©.

Lecture 9: Types of Malware
Ø£ÙÙØ§Ø¹ Ø§ÙØ¨Ø±ÙØ¬ÙØ§Øª Ø§ÙØ®Ø¨ÙØ«Ø©

Type | Description | Examples
Virus | Attaches to files, needs user action to spread | Macro viruses
Worm | Self-replicating, spreads via network WITHOUT user action | SQL Slammer, WannaCry
Trojan | Disguised as legitimate software, opens backdoors | Zeus, Emotet
Ransomware | Encrypts files, demands payment | CryptoLocker, Ryuk
Spyware | Secretly monitors user activity (keystrokes, passwords) | Keyloggers, FinSpy
Adware | Delivers unwanted ads, tracks browsing | Fireball, Gator
Rootkit | Hides at OS/kernel level, provides root access, VERY hard to detect | ZeroAccess
Botnet | Network of compromised devices controlled by "Bot Herder" | Mirai
Backdoor | Hidden entry point for unauthorized access | Back Orifice
Fileless Malware | Operates in memory only, no files on disk | Kovter, Poweliks
Logic Bomb | Activates when specific condition/date is met | Friday the 13th
Rogue Security | Fake antivirus that scams users | PC Defender
Scareware | Uses fear to trick users into paying | Fake virus alerts
Cryptojacking | Hijacks CPU/GPU to mine cryptocurrency | Coinhive, PowerGhost

Virus (Ø§ÙÙÙØ±ÙØ³): ÙÙØªØµÙ Ø¨ÙÙÙØ§Øª ÙØ¸ÙÙØ© ÙÙÙØªØ´Ø± ÙÙÙÙØ§Øª Ø£Ø®Ø±Ù. ÙØØªØ§Ø¬ ØªÙØ§Ø¹Ù Ø§ÙÙØ³ØªØ®Ø¯Ù (ØªØ´ØºÙÙ Ø¨Ø±ÙØ§ÙØ¬ ÙØµØ§Ø¨). ÙÙÙÙ Ø£Ù ÙÙØ³Ø¯ Ø£Ù ÙØØ°Ù Ø£Ù ÙØ¹Ø¯Ù Ø§ÙÙÙÙØ§Øª. Ø£ÙØ«ÙØ©: ÙÙØ±ÙØ³Ø§Øª Ø§ÙÙÙÙØ§ØªØ ÙÙØ±ÙØ³Ø§Øª Ø§ÙÙØ§ÙØ±Ù.

Worm (Ø§ÙØ¯ÙØ¯Ø©): Ø¨Ø±ÙØ§ÙØ¬ Ø®Ø¨ÙØ« ÙØ³ØªÙØ³Ø® Ø°Ø§ØªÙ ÙÙÙØªØ´Ø± Ø¨Ø¯ÙÙ ØªØ¯Ø®Ù Ø§ÙÙØ³ØªØ®Ø¯Ù. ÙØ³ØªØºÙ Ø«ØºØ±Ø§Øª ÙÙ Ø¨Ø±ÙØªÙÙÙÙØ§Øª Ø§ÙØ´Ø¨ÙØ©. ÙØ³Ø¨Ø¨ Ø§Ø²Ø¯ØØ§Ù Ø§ÙØ´Ø¨ÙØ© ÙØ¨Ø·Ø¦ÙØ§. ÙØ§ ÙØØªØ§Ø¬ Ø§ÙØ§ÙØªØµØ§Ù Ø¨Ø¨Ø±ÙØ§ÙØ¬ (Ø¹ÙØ³ Ø§ÙÙÙØ±ÙØ³). Ø£ÙØ«ÙØ©: SQL Slammer, WannaCry.

Trojan (ØØµØ§Ù Ø·Ø±ÙØ§Ø¯Ø©): ÙØªÙÙØ± ÙØ¨Ø±ÙØ§ÙØ¬ Ø´Ø±Ø¹Ù ÙÙØ®Ø¯Ø¹ Ø§ÙÙØ³ØªØ®Ø¯Ù. ÙØ§ ÙØ³ØªÙØ³Ø® Ø°Ø§ØªÙ ÙÙÙ ÙÙØªØ Ø£Ø¨ÙØ§Ø¨ Ø®ÙÙÙØ© ÙÙÙÙØ§Ø¬ÙÙÙ. ÙÙØ³ØªØ®Ø¯Ù ÙØ³Ø±ÙØ© Ø§ÙØ¨ÙØ§ÙØ§Øª Ø£Ù Ø§ÙÙØ±Ø§ÙØ¨Ø©. Ø£ÙØ«ÙØ©: Zeus, Emotet.

Ransomware (Ø¨Ø±ÙØ§ÙØ¬ Ø§ÙÙØ¯ÙØ©): ÙØ´ÙØ± ÙÙÙØ§Øª Ø§ÙØ¶ØÙØ© Ø£Ù ÙÙÙÙ Ø§ÙÙØ¸Ø§Ù. ÙØ·Ø§ÙØ¨ Ø¨ÙØ¯ÙØ© (Ø¹Ø§Ø¯Ø© Ø¨Ø§ÙØ¹ÙÙØ§Øª Ø§ÙÙØ´ÙØ±Ø©) ÙØ§Ø³ØªØ¹Ø§Ø¯Ø© Ø§ÙÙØµÙÙ. ÙØ³ØªÙØ¯Ù Ø§ÙØ£ÙØ±Ø§Ø¯ ÙØ§ÙØ´Ø±ÙØ§Øª ÙØ§ÙØ¨ÙÙØ© Ø§ÙØªØØªÙØ© Ø§ÙØØ±Ø¬Ø©. ÙÙØªØ´Ø± Ø¹Ø¨Ø± Ø±Ø³Ø§Ø¦Ù Ø§ÙØªØµÙØ¯ Ø£Ù Ø§ÙØªØÙÙÙØ§Øª Ø§ÙØ®Ø¨ÙØ«Ø©. Ø£ÙØ«ÙØ©: CryptoLocker, Ryuk.

Spyware (Ø¨Ø±ÙØ§ÙØ¬ Ø§ÙØªØ¬Ø³Ø³): ÙØ±Ø§ÙØ¨ ÙØ´Ø§Ø· Ø§ÙÙØ³ØªØ®Ø¯Ù Ø³Ø±Ø§Ù Ø¨Ø¯ÙÙ Ø¹ÙÙÙ. ÙØ¬ÙØ¹ ÙØ¹ÙÙÙØ§Øª ÙØ«Ù Ø§ÙØ¨Ø§Ø³ÙØ±Ø¯Ø§Øª ÙØ¶Ø±Ø¨Ø§Øª Ø§ÙÙÙØ§ØªÙØ ÙØªØ§Ø±ÙØ® Ø§ÙØªØµÙØ. ÙÙØ³ØªØ®Ø¯Ù ÙØ³Ø±ÙØ© Ø§ÙÙÙÙØ© Ø£Ù Ø§ÙØªØ¬Ø³Ø³. Ø£ÙØ«ÙØ©: Keyloggers, FinSpy.

Adware (Ø¨Ø±ÙØ§ÙØ¬ Ø§ÙØ¥Ø¹ÙØ§ÙØ§Øª): ÙØ¹Ø±Ø¶ Ø¥Ø¹ÙØ§ÙØ§Øª ØºÙØ± ÙØ±ØºÙØ¨Ø© (ÙÙØ§ÙØ° ÙÙØ¨Ø«ÙØ© Ø£Ù ØªØÙÙÙØ§Øª). ÙØªØªØ¨Ø¹ Ø¹Ø§Ø¯Ø§Øª Ø§ÙØªØµÙØ ÙØ§Ø³ØªÙØ¯Ø§Ù Ø§ÙØ¥Ø¹ÙØ§ÙØ§Øª. ØºØ§ÙØ¨Ø§Ù ÙØ£ØªÙ ÙØ¹ Ø§ÙØ¨Ø±Ø§ÙØ¬ Ø§ÙÙØ¬Ø§ÙÙØ©. Ø£ÙØ«ÙØ©: Fireball, Gator.

Rootkit (Ø§ÙØ±ÙØªÙÙØª): ÙØ¹Ø·Ù Ø§ÙÙÙØ§Ø¬Ù ÙØµÙÙ root ÙÙÙØ¸Ø§Ù. ÙØ¹ÙÙ Ø¹ÙÙ ÙØ³ØªÙÙ ÙÙØ®ÙØ¶ ÙÙ ÙØ¸Ø§Ù Ø§ÙØªØ´ØºÙÙ (Ø§ÙÙÙØ±ÙÙ). ØµØ¹Ø¨ Ø¬Ø¯Ø§Ù Ø§ÙØªØ´Ø§ÙÙ ÙØ¥Ø²Ø§ÙØªÙ (ÙØ¯ ÙØØªØ§Ø¬ Ø¥Ø¹Ø§Ø¯Ø© ØªØ«Ø¨ÙØª Ø§ÙÙØ¸Ø§Ù). Ø£ÙØ«ÙØ©: ZeroAccess, Sony BMG CD rootkit.

Botnet (Ø´Ø¨ÙØ© Ø§ÙØ¨ÙØªØ§Øª): ÙØ¬ÙÙØ¹Ø© Ø£Ø¬ÙØ²Ø© ÙØ®ØªØ±ÙØ© (zombies) ØªØØª Ø³ÙØ·Ø±Ø© Bot Herder. ØªÙØ³ØªØ®Ø¯Ù ÙÙØ¬ÙØ§Øª DDoS Ø£Ù Ø§ÙØ³Ø¨Ø§Ù Ø£Ù ÙØ¬ÙØ§Øª Ø£Ø®Ø±Ù. Ø§ÙØ£Ø¬ÙØ²Ø© Ø§ÙÙØµØ§Ø¨Ø© ØªØ¨ÙÙ ÙØ´Ø·Ø© Ø¨Ø¯ÙÙ Ø¹ÙÙ ÙØ§ÙÙÙØ§. Ø£ÙØ«ÙØ©: Mirai, Zeus Botnet.

Backdoor (Ø§ÙØ¨Ø§Ø¨ Ø§ÙØ®ÙÙÙ): Ø·Ø±ÙÙØ© Ø³Ø±ÙØ© ÙØªØ¬Ø§ÙØ² Ø§ÙÙØµØ§Ø¯ÙØ© Ø§ÙØ¹Ø§Ø¯ÙØ©. ØºØ§ÙØ¨Ø§Ù ÙÙØ«Ø¨Øª Ø¨ÙØ§Ø³Ø·Ø© Trojans Ø£Ù Worms. ÙÙØ³ØªØ®Ø¯Ù ÙÙØªØÙÙ Ø¹Ù Ø¨Ø¹Ø¯ Ø£Ù Ø³Ø±ÙØ© Ø§ÙØ¨ÙØ§ÙØ§Øª. ÙØ¹ÙÙ Ø¨ØµÙØª ÙÙ Ø§ÙØ®ÙÙÙØ©. Ø£ÙØ«ÙØ©: Back Orifice, FinFisher.

Fileless Malware (Ø®Ø¨ÙØ« Ø¨ÙØ§ ÙÙÙØ§Øª): ÙØ¹ÙÙ ÙÙ Ø§ÙØ°Ø§ÙØ±Ø© ÙÙØ· ÙÙØ§ ÙØ®Ø²Ù ÙÙÙØ§Øª Ø¹ÙÙ Ø§ÙÙØ±Øµ. ÙØ³ØªØºÙ Ø«ØºØ±Ø§Øª ÙÙ Ø¨Ø±Ø§ÙØ¬ Ø´Ø±Ø¹ÙØ© ÙØ«Ù PowerShell. ØµØ¹Ø¨ Ø§ÙØªØ´Ø§ÙÙ Ø¨ÙØ¶Ø§Ø¯Ø§Øª Ø§ÙÙÙØ±ÙØ³Ø§Øª Ø§ÙØªÙÙÙØ¯ÙØ©. ÙÙØ³ØªØ®Ø¯Ù ÙÙ APTs. Ø£ÙØ«ÙØ©: Kovter, Poweliks.

Logic Bomb (Ø§ÙÙÙØ¨ÙØ© Ø§ÙÙÙØ·ÙÙØ©): ÙÙØ¯ Ø®Ø¨ÙØ« ÙØ¯ÙØ¬ ÙÙ Ø§ÙÙØ¸Ø§Ù ÙÙÙØ° Ø¹ÙØ¯ ØªØÙÙ Ø´Ø±Ø· ÙØ¹ÙÙ (ØªØ§Ø±ÙØ® Ø£Ù ØØ¯Ø«). ÙØ³Ø¨Ø¨ Ø¶Ø±Ø±Ø§Ù ÙØ«Ù ØØ°Ù Ø§ÙÙÙÙØ§Øª Ø£Ù ØªØ¹Ø·ÙÙ Ø§ÙÙØ¸Ø§Ù. ÙÙØ³ØªØ®Ø¯Ù ÙÙ ÙØ¬ÙØ§Øª Ø§ÙØªØ®Ø±ÙØ¨ Ø§ÙØ¯Ø§Ø®ÙÙ. Ø£ÙØ«ÙØ©: Friday the 13th.

Rogue Security Software (Ø¨Ø±ÙØ§ÙØ¬ Ø£ÙØ§Ù ÙØ²ÙÙ): ÙØªØ¸Ø§ÙØ± Ø¨Ø£ÙÙ Ø¨Ø±ÙØ§ÙØ¬ ØÙØ§ÙØ© Ø´Ø±Ø¹Ù ÙÙÙÙ Ø®Ø¨ÙØ«. ÙØØªØ§Ù Ø¹ÙÙ Ø§ÙÙØ³ØªØ®Ø¯ÙÙÙ ÙØ¯ÙØ¹ Ø«ÙÙ Ø¨Ø±Ø§ÙØ¬ ÙØ²ÙÙØ© Ø¨Ø¥Ø¸ÙØ§Ø± ØªÙØ¨ÙÙØ§Øª ÙØ§Ø°Ø¨Ø©. ÙØ¯ ÙØ«Ø¨Øª Ø¨Ø±Ø§ÙØ¬ Ø®Ø¨ÙØ«Ø© Ø¥Ø¶Ø§ÙÙØ©. Ø£ÙØ«ÙØ©: AntiVirus 360, PC Defender.

Scareware (Ø¨Ø±ÙØ§ÙØ¬ Ø§ÙØªØ®ÙÙÙ): ÙØ³ØªØ®Ø¯Ù Ø§ÙÙÙØ¯Ø³Ø© Ø§ÙØ§Ø¬ØªÙØ§Ø¹ÙØ© ÙØ¥Ø®Ø§ÙØ© Ø§ÙÙØ³ØªØ®Ø¯Ù Ø¨Ø£Ù ÙØ¸Ø§ÙÙ ÙØµØ§Ø¨. ÙÙØ¬Ù Ø§ÙÙØ³ØªØ®Ø¯Ù ÙÙÙØ§ÙØ¹ Ø®Ø¨ÙØ«Ø© ØªØ¹Ø±Ø¶ ØÙÙÙ ÙØ²ÙÙØ©. ÙØ³Ø¨Ø¨ ÙØµÙ ÙÙØ¨Ø«ÙØ§Øª Ø£Ù Ø´Ø§Ø´Ø§Øª ÙÙÙ Ø¨ØªØØ°ÙØ±Ø§Øª ÙØ§Ø°Ø¨Ø©. Ø£ÙØ«ÙØ©: Windows Defender Scareware.

Cryptojacking (Ø§Ø®ØªØ·Ø§Ù Ø§ÙØªØ¹Ø¯ÙÙ): ÙØ®ØªØ·Ù ÙÙØ§Ø±Ø¯ Ø§ÙÙØ¸Ø§Ù (CPU, GPU) ÙØªØ¹Ø¯ÙÙ Ø§ÙØ¹ÙÙØ§Øª Ø§ÙÙØ´ÙØ±Ø© Ø¨Ø¯ÙÙ ÙÙØ§ÙÙØ©. ÙØ¹ÙÙ Ø¨ØµÙØª ÙÙØ³Ø¨Ø¨ Ø¨Ø·Ø¡ Ø§ÙØ£Ø¯Ø§Ø¡ ÙØ§Ø±ØªÙØ§Ø¹ Ø§ÙØØ±Ø§Ø±Ø© ÙØ²ÙØ§Ø¯Ø© Ø§Ø³ØªÙÙØ§Ù Ø§ÙØ·Ø§ÙØ©. ÙÙØªØ´Ø± Ø¹Ø¨Ø± ÙÙØ§ÙØ¹ Ø®Ø¨ÙØ«Ø© Ø£Ù Ø¥Ø¶Ø§ÙØ§Øª Ø§ÙÙØªØµÙØ. Ø£ÙØ«ÙØ©: Coinhive, PowerGhost.

Lecture 10: Types of Attacks
Ø£ÙÙØ§Ø¹ Ø§ÙÙØ¬ÙØ§Øª

# | Attack | Description
1 | Phishing | Deceptive emails/websites to steal credentials
2 | DoS/DDoS | Floods system with requests. DDoS uses botnets. Examples: SYN flood, HTTP flood, Ping of Death
3 | MitM | Intercepts communication between two parties (public Wi-Fi)
4 | SQL Injection | Injects malicious SQL via input fields. Example: ' OR 1=1; --
5 | XSS | Injects malicious JavaScript into websites to steal cookies
6 | Brute Force | Tries all possible password combinations
7 | Password Attack | Dictionary attacks, Rainbow tables
8 | Ransomware Attack | WannaCry, Ryuk, REvil
9 | Social Engineering | Impersonation, pretexting, baiting, tailgating
10 | Zero-Day | Exploits unknown vulnerabilities. Examples: Stuxnet
11 | APT | Long-term, stealthy, state-sponsored attacks
12 | Drive-By Download | Malware downloaded by visiting malicious website
13 | Insider Threat | Attack by employee/contractor with legitimate access
14 | Session Hijacking | Stealing session tokens to impersonate users
15 | Eavesdropping/Sniffing | Capturing network traffic. Tools: Wireshark, tcpdump
16 | Supply Chain | Compromising vendor/supplier. Example: SolarWinds, Target
17 | Cryptojacking | Using victim's resources to mine crypto
18 | DNS Spoofing | Redirects DNS to malicious sites. Tools: dnsspoof, Ettercap
19 | Watering Hole | Compromises websites frequently visited by target group
20 | IoT Attack | Exploits insecure IoT devices. Example: Mirai botnet

Phishing (Ø§ÙØªØµÙØ¯): Ø±Ø³Ø§Ø¦Ù Ø¥ÙÙØªØ±ÙÙÙØ© Ø£Ù ÙÙØ§ÙØ¹ ÙØ²ÙÙØ© ØªØªØ¸Ø§ÙØ± Ø¨Ø£ÙÙØ§ ÙÙ Ø¬ÙØ§Øª ÙÙØ«ÙÙØ© ÙØ³Ø±ÙØ© Ø¨ÙØ§ÙØ§Øª ØØ³Ø§Ø³Ø© ÙØ«Ù Ø§ÙØ¨Ø§Ø³ÙØ±Ø¯Ø§Øª ÙØ§ÙÙØ¹ÙÙÙØ§Øª Ø§ÙÙØ§ÙÙØ©.

DoS/DDoS (ØØ±ÙØ§Ù Ø§ÙØ®Ø¯ÙØ©): DoS - ÙÙØ§Ø¬Ù ÙØ§ØØ¯ ÙØºØ±Ù Ø§ÙØ³ÙØ±ÙØ± Ø¨Ø·ÙØ¨Ø§Øª. DDoS - ÙØ¬ÙÙ ÙÙØ²Ø¹ ÙÙ ÙØµØ§Ø¯Ø± ÙØªØ¹Ø¯Ø¯Ø© (Ø¨ÙØª ÙØª). Ø£ÙØ«ÙØ©: SYN flood, HTTP flood, Ping of Death.

MitM (Ø§ÙØ±Ø¬Ù ÙÙ Ø§ÙÙØ³Ø·): ÙØ¹ØªØ±Ø¶ Ø§ÙØ§ØªØµØ§Ù Ø¨ÙÙ Ø·Ø±ÙÙÙ ÙÙÙÙÙÙ Ø§ÙØªÙØµØª Ø£Ù ØªØ¹Ø¯ÙÙ Ø§ÙØ¨ÙØ§ÙØ§Øª. Ø´Ø§Ø¦Ø¹ Ø¹ÙÙ Wi-Fi Ø§ÙØ¹Ø§Ù ØºÙØ± Ø§ÙØ¢ÙÙ.

SQL Injection (ØÙÙ SQL): Ø¥Ø¯Ø®Ø§Ù Ø£ÙØ§ÙØ± SQL Ø®Ø¨ÙØ«Ø© ÙÙ ØÙÙÙ Ø§ÙØ¥Ø¯Ø®Ø§Ù ÙØ§Ø³ØªØºÙØ§Ù Ø«ØºØ±Ø§Øª ÙÙ ÙÙØ§Ø¹Ø¯ Ø§ÙØ¨ÙØ§ÙØ§Øª. ÙØ«Ø§Ù: ' OR 1=1; --

XSS (Ø§ÙØ¨Ø±ÙØ¬Ø© Ø¹Ø¨Ø± Ø§ÙÙÙÙØ¹): ØÙÙ Ø³ÙØ±ÙØ¨ØªØ§Øª JavaScript Ø®Ø¨ÙØ«Ø© ÙÙ ØµÙØØ§Øª Ø§ÙÙÙØ¨ ÙØ³Ø±ÙØ© Ø§ÙÙÙÙÙØ² Ø£Ù Ø¨ÙØ§ÙØ§Øª Ø§ÙÙØ³ØªØ®Ø¯ÙÙÙ.

Brute Force (Ø§ÙÙÙØ© Ø§ÙØºØ§Ø´ÙØ©): ØªØ¬Ø±Ø¨Ø© ÙÙ ØªØ±ÙÙØ¨Ø§Øª Ø§ÙØ¨Ø§Ø³ÙØ±Ø¯ Ø§ÙÙÙÙÙØ© ØØªÙ Ø¥ÙØ¬Ø§Ø¯ Ø§ÙØµØÙØØ©.

Password Attack (ÙØ¬ÙØ§Øª Ø§ÙØ¨Ø§Ø³ÙØ±Ø¯): Dictionary Attack - ØªØ¬Ø±Ø¨Ø© ÙÙÙØ§Øª ÙÙ ÙØ§Ø¦ÙØ© Ø´Ø§Ø¦Ø¹Ø©. Rainbow Tables - Ø¬Ø¯Ø§ÙÙ ÙØ§Ø´ ÙØØ³ÙØ¨Ø© ÙØ³Ø¨ÙØ§Ù.

Ransomware Attack: ØªØ´ÙÙØ± ÙÙÙØ§Øª Ø§ÙØ¶ØÙØ© ÙØ§ÙÙØ·Ø§ÙØ¨Ø© Ø¨ÙØ¯ÙØ© ÙÙÙ Ø§ÙØªØ´ÙÙØ±. Ø£ÙØ«ÙØ©: WannaCry, Ryuk, REvil.

Social Engineering (Ø§ÙÙÙØ¯Ø³Ø© Ø§ÙØ§Ø¬ØªÙØ§Ø¹ÙØ©): Ø®Ø¯Ø§Ø¹ Ø§ÙØ£Ø´Ø®Ø§Øµ ÙØ¥ÙØ´Ø§Ø¡ ÙØ¹ÙÙÙØ§Øª Ø³Ø±ÙØ©. ÙØ´ÙÙ: Pretexting (Ø§ÙØªØ¸Ø§ÙØ± Ø¨ÙÙÙØ© ÙØ²ÙÙØ©)Ø Baiting (Ø§ÙØ¥ØºØ±Ø§Ø¡)Ø Tailgating (Ø§ÙØ¯Ø®ÙÙ Ø®ÙÙ Ø´Ø®Øµ ÙØµØ±Ø).

Zero-Day: Ø§Ø³ØªØºÙØ§Ù Ø«ØºØ±Ø© ØºÙØ± ÙØ¹Ø±ÙÙØ© ÙÙØ¨Ø§Ø¦Ø¹ ÙÙØ§ ÙÙØ¬Ø¯ ÙÙØ§ ØªØµØÙØ Ø¨Ø¹Ø¯. Ø£ÙØ«ÙØ©: Stuxnet.

APT (Ø§ÙØªÙØ¯ÙØ¯ Ø§ÙÙØ³ØªÙØ± Ø§ÙÙØªÙØ¯Ù): ÙØ¬ÙØ§Øª Ø·ÙÙÙØ© Ø§ÙÙØ¯Ù ÙØ®ÙÙØ©Ø Ø¹Ø§Ø¯Ø© ÙÙÙÙØ© ÙÙ Ø¯ÙÙ. Ø§ÙÙØ¯Ù: Ø§ÙØªØ¬Ø³Ø³ Ø£Ù Ø§ÙØ³Ø±ÙØ© Ø¹ÙÙ Ø§ÙÙØ¯Ù Ø§ÙØ·ÙÙÙ.

Drive-By Download: ØªØÙÙÙ Ø¨Ø±Ø§ÙØ¬ Ø®Ø¨ÙØ«Ø© ØªÙÙØ§Ø¦ÙØ§Ù Ø¹ÙØ¯ Ø²ÙØ§Ø±Ø© ÙÙÙØ¹ ÙØ®ØªØ±ÙØ Ø¨Ø¯ÙÙ Ø¹ÙÙ Ø§ÙÙØ³ØªØ®Ø¯Ù.

Insider Threat (Ø§ÙØªÙØ¯ÙØ¯ Ø§ÙØ¯Ø§Ø®ÙÙ): ÙØ¬ÙÙ ÙÙ ÙÙØ¸Ù Ø£Ù ÙØªØ¹Ø§ÙØ¯ ÙØ¯ÙÙ ÙØµÙÙ Ø´Ø±Ø¹Ù. ÙØ¯ ÙÙÙÙ ÙØªØ¹ÙØ¯Ø§Ù (Ø³Ø±ÙØ© IP) Ø£Ù ØºÙØ± ÙØªØ¹ÙØ¯ (ÙÙÙØ¹ Ø¶ØÙØ© ÙÙØªØµÙØ¯).

Session Hijacking (Ø§Ø®ØªØ·Ø§Ù Ø§ÙØ¬ÙØ³Ø©): Ø³Ø±ÙØ© Ø±ÙÙØ² Ø§ÙØ¬ÙØ³Ø© ÙØ§ÙØªØØ§Ù Ø´Ø®ØµÙØ© Ø§ÙÙØ³ØªØ®Ø¯Ù ÙØ§ÙÙØµÙÙ ÙØØ³Ø§Ø¨Ù.

Eavesdropping/Sniffing (Ø§ÙØªÙØµØª): Ø§ÙØªÙØ§Ø· ØØ±ÙØ© Ø§ÙØ´Ø¨ÙØ© ÙÙØØµÙÙ Ø¹ÙÙ Ø¨ÙØ§ÙØ§Øª ØØ³Ø§Ø³Ø©. Ø£Ø¯ÙØ§Øª: Wireshark, tcpdump.

Supply Chain (Ø³ÙØ³ÙØ© Ø§ÙØªÙØ±ÙØ¯): Ø§Ø®ØªØ±Ø§Ù ÙÙØ±Ø¯ Ø£Ù ÙØ²ÙØ¯ Ø®Ø¯ÙØ© ÙÙÙØµÙÙ ÙØ¹ÙÙØ§Ø¦Ù. Ø£ÙØ«ÙØ©: SolarWinds, Target. Ø®Ø·ÙØ± ÙØ£ÙÙ ÙØ¤Ø«Ø± Ø¹ÙÙ ÙÙØ¸ÙØ§Øª ÙØªØ¹Ø¯Ø¯Ø©.

Cryptojacking (Ø§Ø®ØªØ·Ø§Ù Ø§ÙØªØ¹Ø¯ÙÙ): Ø§Ø³ØªØ®Ø¯Ø§Ù ÙÙØ§Ø±Ø¯ Ø§ÙØ¶ØÙØ© Ø³Ø±Ø§Ù ÙØªØ¹Ø¯ÙÙ Ø§ÙØ¹ÙÙØ§Øª Ø§ÙÙØ´ÙØ±Ø©.

DNS Spoofing (Ø§ÙØªØØ§Ù DNS): ØªØÙÙÙ Ø§Ø³ØªØ¹ÙØ§ÙØ§Øª DNS ÙÙÙØ§ÙØ¹ Ø®Ø¨ÙØ«Ø©. Ø£Ø¯ÙØ§Øª: dnsspoof, Ettercap.

Watering Hole (ØÙØ±Ø© Ø§ÙÙØ§Ø¡): Ø§Ø®ØªØ±Ø§Ù ÙÙØ§ÙØ¹ ÙØ²ÙØ±ÙØ§ Ø§ÙÙØ¯Ù Ø¨Ø´ÙÙ ÙØªÙØ±Ø± ÙØªØ«Ø¨ÙØª Ø¨Ø±Ø§ÙØ¬ Ø®Ø¨ÙØ«Ø© Ø¹ÙÙÙØ§.

IoT Attack: Ø§Ø³ØªØºÙØ§Ù Ø£Ø¬ÙØ²Ø© Ø¥ÙØªØ±ÙØª Ø§ÙØ£Ø´ÙØ§Ø¡ ØºÙØ± Ø§ÙØ¢ÙÙØ©. ÙØ«Ø§Ù: Mirai botnet Ø§Ø³ØªØ®Ø¯Ù ÙØ§ÙÙØ±Ø§Øª ÙØ£Ø¬ÙØ²Ø© IoT ÙØ´Ù ÙØ¬ÙØ§Øª DDoS.

Lecture 11: Hacking Methodologies
ÙÙÙØ¬ÙØ© Ø§ÙØ§Ø®ØªØ±Ø§Ù

Hacking Phases

1. Reconnaissance (Footprinting): Gathering info. Passive (Google, WHOIS) or Active (Port scanning)

2. Scanning: Vulnerability scanning (Nessus, OpenVAS), Network mapping, Banner grabbing, Enumeration

3. Gaining Access (Exploitation): Buffer overflow, SQL injection, Password attacks

4. Maintaining Access: Backdoors, Rootkits, Privilege escalation

5. Covering Tracks: Log tampering, Obfuscation, Changing timestamps

6. Exfiltration/Damage: Data theft, Ransomware, Sabotage

1. Ø§ÙØ§Ø³ØªØ·ÙØ§Ø¹: Ø¬ÙØ¹ ÙØ¹ÙÙÙØ§Øª Ø¹Ù Ø§ÙÙØ¯Ù (Ø³ÙØ¨Ù: Ø¬ÙØ¬ÙØ ÙØ´Ø·: ÙØØµ Ø§ÙØ¨ÙØ±ØªØ§Øª).
2. Ø§ÙÙØØµ: Ø§ÙØ¨ØØ« Ø¹Ù Ø§ÙØ«ØºØ±Ø§Øª ÙØ§ÙØ¨ÙØ±ØªØ§Øª Ø§ÙÙÙØªÙØØ©.
3. Ø§ÙÙØµÙÙ: Ø§Ø³ØªØºÙØ§Ù Ø§ÙØ«ØºØ±Ø© ÙÙØ¯Ø®ÙÙ.
4. Ø§ÙÙØØ§ÙØ¸Ø© Ø¹ÙÙ Ø§ÙÙØµÙÙ: ØªØ«Ø¨ÙØª Backdoor ÙÙØ±Ø¬ÙØ¹ ØªØ§ÙÙ.
5. ÙØ³Ø Ø§ÙØ£Ø«Ø±: ØØ°Ù Ø§ÙØ³Ø¬ÙØ§Øª ÙØ§ÙØ£Ø¯ÙØ©.
6. Ø§ÙØ³Ø±ÙØ©/Ø§ÙØªØ®Ø±ÙØ¨: Ø³Ø±ÙØ© Ø§ÙØ¨ÙØ§ÙØ§Øª Ø£Ù ØªØ´ÙÙØ±ÙØ§ (Ransomware).

Penetration Testing Types

Type | Knowledge
Black Box | Tester has NO prior knowledge (external attacker)
White Box | Tester has FULL knowledge (source code, IPs)
Gray Box | Tester has PARTIAL knowledge

Black Box: Ø§ÙÙØ®ØªØ¨Ø± ÙØ´ Ø¹Ø§Ø±Ù ØØ§Ø¬Ø© Ø¹Ù Ø§ÙÙØ¸Ø§Ù (Ø²Ù ÙØ§ÙØ± Ø®Ø§Ø±Ø¬Ù).
White Box: Ø§ÙÙØ®ØªØ¨Ø± Ø¹ÙØ¯Ù ÙÙ Ø§ÙÙØ¹ÙÙÙØ§Øª (Ø§ÙÙÙØ¯Ø IPs).
Gray Box: Ø§ÙÙØ®ØªØ¨Ø± Ø¹ÙØ¯Ù ÙØ¹ÙÙÙØ§Øª Ø¬Ø²Ø¦ÙØ©.

Common Hacking Tools

Nmap: Network scanning, port discovery

Wireshark: Packet sniffing and analysis

Metasploit: Exploitation framework

John the Ripper: Password cracking

Burp Suite: Web vulnerability scanner (SQL injection, XSS)

Aircrack-ng: Wi-Fi cracking

Nessus/OpenVAS: Vulnerability scanning

Ettercap: MitM attacks, ARP spoofing

Nmap: ÙØØµ Ø§ÙØ´Ø¨ÙØ© ÙØ§ÙØªØ´Ø§Ù Ø§ÙØ¨ÙØ±ØªØ§Øª.
Wireshark: Ø§ÙØªÙØ§Ø· ÙØªØÙÙÙ Ø§ÙØ¨Ø§ÙØªØ³.
Metasploit: Ø¥Ø·Ø§Ø± Ø¹ÙÙ ÙÙØ§Ø®ØªØ±Ø§Ù.
John the Ripper: ÙØ³Ø± Ø§ÙØ¨Ø§Ø³ÙØ±Ø¯Ø§Øª.
Burp Suite: ÙØØµ Ø«ØºØ±Ø§Øª Ø§ÙÙÙØ§ÙØ¹.
Aircrack-ng: ÙØ³Ø± ØªØ´ÙÙØ± Ø§ÙÙØ§Ù ÙØ§Ù.

Security Assessment Techniques

Vulnerability Assessment: Automated scanning for known vulnerabilities

Penetration Testing: Simulating real attacks

Security Audit: Compliance review against standards (ISO 27001, HIPAA)

Risk Assessment: Threat modeling, Risk matrix, BIA

Red Teaming: Full-scale attack simulation (Red attacks, Blue defends)

Code Review: SAST (static), DAST (dynamic)

Social Engineering Testing: Phishing campaigns, pretexting, baiting

Wireless Assessment: Encryption testing, Rogue AP detection

Incident Response Testing: Tabletop exercises, live simulations

Vulnerability Assessment: ÙØØµ Ø¢ÙÙ ÙÙØ«ØºØ±Ø§Øª Ø§ÙÙØ¹Ø±ÙÙØ©.
Penetration Testing: ÙØØ§ÙØ§Ø© ÙØ¬ÙØ§Øª ØÙÙÙÙØ©.
Security Audit: ÙØ±Ø§Ø¬Ø¹Ø© Ø§ÙØ§ÙØªØ²Ø§Ù Ø¨Ø§ÙÙØ¹Ø§ÙÙØ±.
Red Teaming: ÙØ±ÙÙ Ø£ØÙØ± ÙÙØ§Ø¬Ù ÙØ£Ø²Ø±Ù ÙØ¯Ø§ÙØ¹.
Code Review: ÙØ±Ø§Ø¬Ø¹Ø© Ø§ÙÙÙØ¯ (SAST: ÙØ¨Ù Ø§ÙØªØ´ØºÙÙØ DAST: Ø£Ø«ÙØ§Ø¡ Ø§ÙØªØ´ØºÙÙ).
Social Engineering Testing: Ø§Ø®ØªØ¨Ø§Ø± ÙØ§Ø¨ÙÙØ© Ø§ÙÙÙØ¸ÙÙÙ ÙÙØ®Ø¯Ø§Ø¹.

Lecture 12: Risk Management
Ø¥Ø¯Ø§Ø±Ø© Ø§ÙÙØ®Ø§Ø·Ø±

Hazard vs Risk

Hazard: A potential source of harm (a vulnerability exists).
Risk: Likelihood of hazard causing harm Ã Impact severity.

Example: Software vulnerability = Hazard. If exposed to internet with known exploits = High Risk. If isolated = Low Risk.

Hazard (Ø§ÙØ®Ø·Ø±): ÙØµØ¯Ø± ÙØØªÙÙ ÙÙØ¶Ø±Ø± (Ø«ØºØ±Ø© ÙÙØ¬ÙØ¯Ø©).
Risk (Ø§ÙÙØ®Ø§Ø·Ø±Ø©): Ø§ØØªÙØ§Ù Ø§ÙØ®Ø·Ø± Ã Ø´Ø¯Ø© Ø§ÙØªØ£Ø«ÙØ±.
ÙØ«Ø§Ù: Ø«ØºØ±Ø© ÙÙ Ø¨Ø±ÙØ§ÙØ¬ = Ø®Ø·Ø±. ÙÙ Ø§ÙØ¨Ø±ÙØ§ÙØ¬ Ø¹ÙÙ Ø§ÙØ¥ÙØªØ±ÙØª = ÙØ®Ø§Ø·Ø±Ø© Ø¹Ø§ÙÙØ©. ÙÙ ÙØ¹Ø²ÙÙ = ÙØ®Ø§Ø·Ø±Ø© ÙÙØ®ÙØ¶Ø©.

Steps in Risk Management

1. Risk Identification: Recognize threats, identify assets, map vulnerabilities

2. Risk Assessment: Analyze threats, evaluate impact, estimate likelihood

3. Risk Prioritization: Use Risk Matrix (Low/Medium/High)

4. Risk Treatment:

Avoidance: Stop the risky activity

Mitigation: Reduce risk with controls (firewalls, encryption)

Transfer: Insurance or outsourcing

Acceptance: Accept low-priority risks

5. Continuous Monitoring: Regular reviews and updates

Ø§ÙØªØ¹Ø±Ù Ø¹ÙÙ Ø§ÙÙØ®Ø§Ø·Ø±: ØªØØ¯ÙØ¯ Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙØ§ÙØ£ØµÙÙ ÙØ§ÙØ«ØºØ±Ø§Øª.
ØªÙÙÙÙ Ø§ÙÙØ®Ø§Ø·Ø±: ØªØÙÙÙ Ø§ÙØªÙØ¯ÙØ¯Ø§Øª ÙØªÙØ¯ÙØ± Ø§ÙØ§ØØªÙØ§Ù ÙØ§ÙØªØ£Ø«ÙØ±.
ØªØ±ØªÙØ¨ Ø§ÙØ£ÙÙÙÙØ§Øª: Ø§Ø³ØªØ®Ø¯Ø§Ù ÙØµÙÙÙØ© Ø§ÙÙØ®Ø§Ø·Ø± (ÙÙÙÙ/ÙØªÙØ³Ø·/Ø¹Ø§ÙÙ).
Ø¹ÙØ§Ø¬ Ø§ÙÙØ®Ø§Ø·Ø±:
- ØªØ¬ÙØ¨: Ø£ÙÙÙ Ø§ÙÙØ´Ø§Ø· Ø§ÙØ®Ø·Ø±.
- ØªØ®ÙÙÙ: ÙÙÙ Ø§ÙÙØ®Ø§Ø·Ø± (Ø¬Ø¯Ø§Ø± ÙØ§Ø±ÙØ ØªØ´ÙÙØ±).
- ÙÙÙ: ØªØ£ÙÙÙ Ø£Ù ØªØ¹ÙÙØ¯.
- ÙØ¨ÙÙ: Ø§Ø±Ø¶Ù Ø¨Ø§ÙÙØ®Ø§Ø·Ø± Ø§ÙØ¨Ø³ÙØ·Ø©.

Risk Planning Elements

Risk Management Framework: ISO 31000, NIST

Security Policies: Rules for securing assets

Incident Response Plan (IRP): Detection, Containment, Eradication, Recovery

Disaster Recovery & Business Continuity: Backups, failover strategies

Training & Awareness: Security programs, attack simulations

Ø¥Ø·Ø§Ø± Ø¥Ø¯Ø§Ø±Ø© Ø§ÙÙØ®Ø§Ø·Ø±: ÙÙÙÙ ÙÙØªØ¹Ø§ÙÙ ÙØ¹ Ø§ÙÙØ®Ø§Ø·Ø± (ISO 31000, NIST).
Ø³ÙØ§Ø³Ø§Øª Ø§ÙØ£ÙØ§Ù: ÙÙØ§Ø¹Ø¯ ÙØÙØ§ÙØ© Ø§ÙØ£ØµÙÙ.
Ø®Ø·Ø© Ø§ÙØ§Ø³ØªØ¬Ø§Ø¨Ø© ÙÙØÙØ§Ø¯Ø«: Ø§ÙØªØ´Ø§ÙØ Ø§ØØªÙØ§Ø¡Ø Ø¥Ø²Ø§ÙØ©Ø Ø§Ø³ØªØ±Ø¯Ø§Ø¯.
Ø§ÙØªØ¹Ø§ÙÙ ÙÙ Ø§ÙÙÙØ§Ø±Ø«: ÙØ³Ø® Ø§ØØªÙØ§Ø·Ù ÙØ®Ø·Ø· Ø¨Ø¯ÙÙØ©.
Ø§ÙØªØ¯Ø±ÙØ¨ ÙØ§ÙØªÙØ¹ÙØ©: Ø¨Ø±Ø§ÙØ¬ Ø£ÙÙÙØ© ÙÙØØ§ÙØ§Ø© ÙØ¬ÙØ§Øª.

Lecture 13: Firewalls & Database Security
Ø§ÙØ¬Ø¯Ø±Ø§Ù Ø§ÙÙØ§Ø±ÙØ© ÙØ£ÙÙ ÙÙØ§Ø¹Ø¯ Ø§ÙØ¨ÙØ§ÙØ§Øª

Firewall Types

Type | Description
Packet-Filtering | Examines packets based on IP/Port. Fast but limited.
Stateful Inspection | Tracks connection state. More secure.
Proxy Firewall | Acts as intermediary. Deep inspection but slower.
NGFW | Advanced features: IPS, application awareness, deep packet inspection
Cloud Firewall | For cloud environments. Scalable.

Deployment:
â¢ Network-Based: Protects entire network perimeter
â¢ Host-Based: Installed on individual devices
â¢ Cloud-Based: Protects cloud infrastructure

Firewall Best Practices

Regularly update firewall rules

Implement least privilege policies

Use multi-layered firewalls

Monitor and log firewall activity

Ø¬Ø¯Ø§Ø± ØªØ±Ø´ÙØ Ø§ÙØØ²Ù: Ø¨ÙÙØØµ Ø§ÙØ¨Ø§ÙØªØ³ ØØ³Ø¨ IP ÙØ§ÙØ¨ÙØ±Øª. Ø³Ø±ÙØ¹ Ø¨Ø³ ÙØØ¯ÙØ¯.
Stateful: Ø¨ÙØªØªØ¨Ø¹ ØØ§ÙØ© Ø§ÙØ§ØªØµØ§Ù. Ø£ÙØ«Ø± Ø£ÙØ§ÙØ§Ù.
Proxy: Ø¨ÙØ´ØªØºÙ ÙÙØ³ÙØ·. ÙØØµ Ø¹ÙÙÙ Ø¨Ø³ Ø£Ø¨Ø·Ø£.
NGFW: Ø¬ÙÙ Ø¬Ø¯ÙØ¯ Ø¨ÙÙØ²Ø§Øª ÙØªÙØ¯ÙØ© (IPSØ ÙØØµ Ø§ÙØªØ·Ø¨ÙÙØ§Øª).
Ø£ÙØ¶Ù Ø§ÙÙÙØ§Ø±Ø³Ø§Øª: ØªØØ¯ÙØ« Ø§ÙÙÙØ§Ø¹Ø¯Ø Ø£ÙÙ ØµÙØ§ØÙØ©Ø Ø·Ø¨ÙØ§Øª ÙØªØ¹Ø¯Ø¯Ø©Ø ÙØ±Ø§ÙØ¨Ø© Ø§ÙØ³Ø¬ÙØ§Øª.

Database Security Threats

SQL Injection: Malicious SQL through input fields

Privilege Abuse: Users misusing their access rights

Malware/Ransomware: Infecting database systems

Data Leakage: Misconfigured DBs, inadequate encryption

Insider Threats: Malicious employees

ØªÙØ¯ÙØ¯Ø§Øª ÙÙØ§Ø¹Ø¯ Ø§ÙØ¨ÙØ§ÙØ§Øª:
- SQL Injection: ØÙÙ Ø£ÙØ§ÙØ± Ø®Ø¨ÙØ«Ø©.
- Ø¥Ø³Ø§Ø¡Ø© Ø§Ø³ØªØ®Ø¯Ø§Ù Ø§ÙØµÙØ§ØÙØ§Øª: ÙÙØ¸Ù ÙØ³ØªØºÙ ØµÙØ§ØÙØ§ØªÙ.
- ØªØ³Ø±ÙØ¨ Ø§ÙØ¨ÙØ§ÙØ§Øª: Ø¥Ø¹Ø¯Ø§Ø¯Ø§Øª Ø®Ø§Ø·Ø¦Ø© Ø£Ù ØªØ´ÙÙØ± Ø¶Ø¹ÙÙ.
- Ø§ÙØªÙØ¯ÙØ¯ Ø§ÙØ¯Ø§Ø®ÙÙ: ÙÙØ¸Ù Ø®Ø§Ø¦Ù.

Database Security Measures

Access Control: RBAC for permissions

Encryption: Data at rest and in transit

Updates & Patching: Keep DB software current

DAM: Database Activity Monitoring

Backup & Recovery: Regular backups, test recovery

Database Firewall: Block malicious SQL queries

Auditing & Logging: Track all access and changes

Least Privilege: Minimum necessary access

MFA: For database access

Segregation: Separate sensitive data into different DBs

Ø¥Ø¬Ø±Ø§Ø¡Ø§Øª ØÙØ§ÙØ© ÙÙØ§Ø¹Ø¯ Ø§ÙØ¨ÙØ§ÙØ§Øª:
- Ø§ÙØªØÙÙ ÙÙ Ø§ÙÙØµÙÙ (RBAC): ØµÙØ§ØÙØ§Øª ØØ³Ø¨ Ø§ÙØ¯ÙØ±.
- Ø§ÙØªØ´ÙÙØ±: Ø¨ÙØ§ÙØ§Øª ÙØ®Ø²ÙØ© ÙÙÙÙÙÙØ©.
- DAM: ÙØ±Ø§ÙØ¨Ø© ÙØ´Ø§Ø· ÙØ§Ø¹Ø¯Ø© Ø§ÙØ¨ÙØ§ÙØ§Øª.
- Ø§ÙÙØ³Ø® Ø§ÙØ§ØØªÙØ§Ø·Ù: ÙØ³Ø® ÙÙØªØ¸Ù ÙØ§Ø®ØªØ¨Ø§Ø± Ø§ÙØ§Ø³ØªØ±Ø¯Ø§Ø¯.
- Ø¬Ø¯Ø§Ø± ÙØ§Ø±Ù ÙÙÙØ§Ø¹Ø¯Ø©: ØØ¸Ø± Ø£ÙØ§ÙØ± SQL Ø§ÙØ®Ø¨ÙØ«Ø©.
- Ø§ÙØªØ¯ÙÙÙ: ØªØ³Ø¬ÙÙ ÙÙ Ø§ÙÙØµÙÙ ÙØ§ÙØªØ¹Ø¯ÙÙØ§Øª.

ð Final Exam

120 Scenario-Based Questions (Including 20 Advanced Thinking Questions)

Score: 0 / 120

â ï¸ ØªÙØ¨ÙÙ ÙØ§Ù

Ø§ÙØ£Ø³Ø¦ÙØ© ÙØ§ ØªØ¸ÙØ± ÙØ£ÙÙ ØªÙØªØ Ø§ÙÙÙÙ ÙÙ ÙØ¶Ø¹ "Ø§ÙÙØ¹Ø§ÙÙÙ" (Preview) Ø§ÙØ°Ù ÙÙÙØ¹ Ø§ÙØ£ÙÙØ§Ø¯.

ÙØÙ Ø§ÙÙØ´ÙÙØ©:
1. ØÙÙ ØªØ·Ø¨ÙÙ Google Chrome ÙØ§ÙØªØ Ø§ÙÙÙÙ ÙÙ Ø®ÙØ§ÙÙ.
2. Ø£Ù Ø§ÙØªØ Ø§ÙÙÙÙ ÙÙ ÙØ§Ø¨ØªÙØ¨ Ø£Ù ÙÙØ¨ÙÙØªØ± (PC) ÙØ¶ÙØ§Ù Ø¹ÙÙÙ 100%.

START EXAM ð

# data[].attributes.body
8.24 8.25 8.20 8.23 8.24 8.21 8.26 8.26 8.20 8.25 8.23 8.23 8.19 8.28 8.24

# data[].attributes.attachment_link.description
Keep it going! You’re just one step away from using JetBrains Educational Pack for free.

# data[].attributes.body
1. (gwmi SoftwareLicensingService).OA3xOriginalProductKey

# data[].attributes.body
(Get-WmiObject -query 'select * from SoftwareLicensingService').OA3xOriginalProductKey

# data[].attributes.headline
الادوات المذكورة في شر

# data[].attributes.body
الادوات المذكورة في شرح اخراج تابلت الثانوية من المنظومة نهائيا بسكربت اداة مفضل الجديد :-

تعريفات سامسونج :-

https://www.mediafire.com/file/m5jumxw1m4ekrdx/SAMSUNG_USB_Driver_for_Mobile_Phones.exe/file

اداة مفضل (التعديل الجديد بالاسكربت) :-

https://www.mediafire.com/file/6w099mqmo3tq8ni/AndroidUtility.rar/file

كلمة سر فك الضغط :-

ezoo tech

اداة SamFWTool :-

https://samfw.com/SamFwToolSetup_v4.9.zip

صورة ال QR :-

https://www.mediafire.com/view/hxvev8mv7ch7xlj/Capture.JPG/file

ملف SN :-

https://www.mediafire.com/file/0363d7480zciqph/SN.txt/file

# data[].attributes.body
https://gifts.vinhgiang.com/yt-webinar-registration-2?gad_campaignid=22848055085&gad_source=2&gclid=EAIaIQobChMImuDWwvTxjgMVl0yKBR1zuxdaEAEYASAAEgIaM_D_BwE&utm_campaign=WebinarA_DemandGenLeads_CountrySplit_FF&utm_content=Answer_MindMouth_Pause_Ads_Video_WebinarA&utm_medium=paid&utm_source=google

# data[].attributes.attachment_link.description
Verifying you are human. This may take a few seconds.

# data[].attributes.body
http://192.168.0.191:53317

# data[].attributes.body
https://download.oracle.com/java/23/latest/jdk-23_windows-x64_bin.exe

# data[].attributes.body
System.out.println(" J ");

System.out.println(" J ");

System.out.println(" J J ");

System.out.println(" J J ");

System.out.println("\n=======\n");

System.out.println(" A ");

System.out.println(" A A ");

System.out.println(" AAAAA ");

System.out.println("A A");

System.out.println("\n=======\n");

System.out.println("V V");

System.out.println(" V V ");

System.out.println(" V V ");

System.out.println(" V ");

System.out.println("\n=======\n");

System.out.println(" A ");

System.out.println(" A A ");

System.out.println(" AAAAA ");

System.out.println("A A");

System.out.println("\n===============\n");

System.out.println("a a^2 a^3");

System.out.println("1 1 1");

System.out.println("2 4 8");

System.out.println("3 9 27");

System.out.println("4 16 64");

System.out.println("\n===============\n");

# data[].attributes.body
meet.google.com/eyj-qtso-ofq

# data[].attributes.body
https://sites.google.com/view/sabahkamel/%D8%A7%D9%84%D8%B5%D9%81%D8%AD%D8%A9-%D8%A7%D9%84%D8%B1%D8%A6%D9%8A%D8%B3%D9%8A%D8%A9

# data[].attributes.body
sabahkamel

# data[].attributes.body
https://support.google.com/drive

# data[].attributes.body
مهند ا

# data[].attributes.body
حمزة

# data[].attributes.body
إسماعيل

# data[].attributes.body
عائشة حسن

# data[].attributes.body
عائشة عبدالله

# data[].attributes.body
عبدالرازق

# data[].attributes.body
عبدالله

# data[].attributes.body
Zainab

# data[].attributes.body
shaikha

# data[].attributes.body
عرين

# data[].attributes.body
Wafaa

# data[].attributes.body
https://ume.la/iSmvog

https://ume.la/QkAEWT

# data[].attributes.body
https://teams.microsoft.com/l/meetup-join/19%3ameeting_NzI0MGQ5YTEtMjM0OS00ZDE5LWI3MDktMjNiMzdkZTRkMjM3%40thread.v2/0?context=%7b%22Tid%22%3a%2269813918-a348-424f-8168-4b246e86245c%22%2c%22Oid%22%3a%2256edf825-4ea5-499a-9bcf-72ccb9fdd512%22%7d

# data[].attributes.body
https://teams.microsoft.com/l/meetup- join/19%3Ameeting_NTVhZWY3OTEtMjI4NC00ZmVjLThiNjAtZGJiZjVlODhj N2Nh%40thread.v2/0?context=%7B%22Tid%22%3A%2269813918-a348-424f-8168-4b246e86245c%22%2C%22Oid%22%3A%22af5fbfd0-3a91- 4c71-b9c5-3005d3e010bc%22%7D

# data[].attributes.body
https://teams.microsoft.com/l/meetup-join/19%3Ameeting_ODIyNzM4MmYtYzllYi00NzcyLWI1MzgtZTI0NDY1YTFiMDg2%40thread.v2/0?context=%7B%22Tid%22%3A%2269813918-a348-424f-8168-4b246e86245c%22%2C%22Oid%22%3A%2242c8c16c-ca63-4f08-b025-a8af69f6c1cc%22%7D

# data[].attributes.body
https://teams.microsoft.com/l/meetup-join/19%3Ameeting_OWY2ZjU0ODEtOTgyNi00N2FkLTlhZTktMjliNjM4OGNmZDgy%40thread.v2/0?context=%7B%22Tid%22%3A%2269813918-a348-424f-8168-4b246e86245c%22%2C%22Oid%22%3A%22217c8972-7e15-4292-91bf-eb03fccfe7e6%22%7D

# data[].attributes.body
https://forms.gle/sPQ7vw3t8wbEJc5a6

# data[].attributes.attachment_link.description
تقييم المعلمة شيماء منسوب

# data[].attributes.body
https://us04web.zoom.us/j/8057390909?pwd=cVV3MVFnQzdDT3hUQmFwV2N1VWJBZz09

# data[].attributes.attachment_link.readable_text
Meet doesn't work on your browser

To join the video meeting

Visit meet.google.com in Google Chrome, Mozilla Firefox, or Microsoft Edge

To install and use Meet on a mobile device, go to

or the

# data[].attributes.attachment_link.description
Real-time meetings by Google. Using your browser, share your video, desktop, and presentations with teammates and customers.

# data[].attributes.attachment_link.description
Real-time meetings by Google. Using your browser, share your video, desktop, and presentations with teammates and customers.

# data[].attributes.body
https://2u.pw/RZptq07

# data[].attributes.body
Mr Ahmed Abdelfattah

# data[].attributes.body
https://vimeo.com/923085387?share=copy

# data[].attributes.body
https://2u.pw/BJh3VWt

# data[].attributes.body
https://teams.microsoft.com/l/meetup-join/19%3ayZW3ta6fNNZee91AfDiuki5rlAylxDHvxBsmW9rPCes1%40thread.tacv2/1710062827054?context=%7b%22Tid%22%3a%22d8a8f9fd-9231-4ac6-ba13-eedeb831e901%22%2c%22Oid%22%3a%22f4e1d70d-a866-4d47-84cb-270256579d9a%22%7d

# data[].attributes.attachment_link.description
Zoom is the leader in modern enterprise video communications, with an easy, reliable cloud platform for video and audio conferencing, chat, and webinars across mobile, desktop, and room systems. Zoom Rooms is the original software-based conference room solution used around the world in board, conference, huddle, and training rooms, as well as executive offices and classrooms. Founded in 2011, Zoom helps businesses and organizations bring their teams together in a frictionless environment to get more done.

# data[].attributes.attachment_link.description
Zoom is the leader in modern enterprise video communications, with an easy, reliable cloud platform for video and audio conferencing, chat, and webinars across mobile, desktop, and room systems. Zoom Rooms is the original software-based conference room solution used around the world in board, conference, huddle, and training rooms, as well as executive offices and classrooms. Founded in 2011, Zoom helps businesses and organizations bring their teams together in a frictionless environment to get more done.

# data[].attributes.attachment_link.description
Zoom is the leader in modern enterprise video communications, with an easy, reliable cloud platform for video and audio conferencing, chat, and webinars across mobile, desktop, and room systems. Zoom Rooms is the original software-based conference room solution used around the world in board, conference, huddle, and training rooms, as well as executive offices and classrooms. Founded in 2011, Zoom helps businesses and organizations bring their teams together in a frictionless environment to get more done.

# data[].attributes.attachment_link.keywords[]
النحو النصوص الشعر الرواية القصة المسرحية الكتابة "العجيب في العربي" "حسام الشرقاوي" البلاغة "الصور البلاغية" "المحسنات البديعية" "الجملة الاسمية" "الجملة ال...

# data[].attributes.attachment_link.title
العَجيب في العربي

# data[].attributes.attachment_link.description
قناة_ العجيب_في_العربي لطلاب الثانوية العامة تقدّم شرحا نموذجيّا وفق #الامتحانات_الحديثة و مراجعة امتحانات قائمة على الاختيار من متعدّد ومعتمدة على مهارات التّفكير العليا،رغبة في وصول الطّالب إلى أعلى درجة، ويأمل العجيب في العربيّ أن يصل بطلابه إلى أعلى درجة ،وسيقوم العجيب في العربي بعمل حلقات تفاعليّة مع الطلاب للإجابة عن أسئلتهم، وسيفتح المجال أمام الطلاب لعمل حصص مجّانية عبر برنامج ZOOM في اللغة العربيّة وسيتم الإعلان عنها مسبقا عبر قناة ( العجيب في العربيّ) .

# data[].attributes.attachment_link.description
Zoom is the leader in modern enterprise video communications, with an easy, reliable cloud platform for video and audio conferencing, chat, and webinars across mobile, desktop, and room systems. Zoom Rooms is the original software-based conference room solution used around the world in board, conference, huddle, and training rooms, as well as executive offices and classrooms. Founded in 2011, Zoom helps businesses and organizations bring their teams together in a frictionless environment to get more done.

# data[].attributes.body
https://meet.google.com/bdv-wptw-wqr

# data[].attributes.body
https://us04web.zoom.us/j/74908627334?pwd=vClz4Wdw4Ilgra5tNqSCvTBa8tkHPJ.1

# data[].attributes.body
https://forms.gle/eiDcMgHsF6yg7oAD8

# data[].attributes.body
https://drive.google.com/drive/folders/1LLZgBUEwCf4YLvpTndHXgobEN682FiWz?usp=sharing

# data[].attributes.body
https://msurvey.government.ae/survey/ministry%20of%20health%20/iqS

# data[].attributes.attachment_link.readable_text
نقدر لك تخصيص بعض الوقت للمشاركة في الاستبيان المعنون (استبيان صحة الطالب) لتقييم عادات الطالب الغذائية، النشاط البدني، والخمول البدني وغيرها من عادات نمط الحياة. ينقسم الاستبيان إلى 3 أجزاء، ويتضمن 19 سؤالاً. سوف يستغرق إكمال الاستبيان 10 - 15 دقيقة. يرجى التأكد من الإجابة على جميع الأسئلة وفقاً لأفضل ما لديك من معلومات حول عاداتك. سيتم استخدام نتائج الاستبيان لتنفيذ تدخلات مصممة لتلبية احتياجات الطلاب من أجل تحسين عاداتهم الصحية ورفاهيتهم بشكلٍ عام.

المشاركة في الاستبيان أمر طوعي. ستبقى هويتك مجهولة وستكون الإجابات سرية. ولن تتأثر الدرجات في الفصل الدراسي سواء قمت بالإجابة على الأسئلة أم لا.

الفئة العمرية المستهدفة: الطلبة في الفئة العمرية 13 - 18 سنة

في حال وافقت على المشاركة في الاستبيان، يرجى الإجابة على الاسئلة التالية

We appreciate you taking time to participate in the survey titled (Student's Health Questionnaire) to measure student's dietary, physical activity, sedentary and other lifestyle habits. The survey is divided to 3 sections, and it includes 19 questions. It will take 10 - 15 minutes to complete it. Please make sure you answer all the questions to your best knowledge towards your habits. The results of the survey will be used to implement interventions tailored to the needs of students in order to improve their healthy habits and overall wellbeing.

Target group: students aged13-18 years

Completing the survey is voluntary. Your identity will remain anonymous and the answers will be confidential. Grade or mark in the class will not be affected whether or not you answer the questions.

If you agree to take part in the survey, please proceed to the next page.

# data[].attributes.attachment_link.title
Student Health Behavior Evaluation (for students) مدرسة رأس الخيمة الحديثة الخاصة مسار: تقييم عادات الطالب الصحية (للطالب)

# data[].attributes.attachment_link.description
نقدر لك تخصيص بعض الوقت للمشاركة في الاستبيان المعنون (استبيان صحة الطالب) لتقييم عادات الطالب الغذائية، النشاط البدني، والخمول البدني وغيرها من عادات نمط الحياة. ينقسم الاستبيان إلى 3 أجزاء، ويتضمن 19 سؤالاً. سوف يستغرق إكمال الاستبيان 10 - 15 دقيقة. يرجى التأكد من الإجابة على جميع الأسئلة وفقاً لأفضل ما لديك من معلومات حول عاداتك.

# data[].attributes.body
https://drive.google.com/file/d/1Pf67OFfdsdPdmD-cB27o8Uj3BJa-07kD/view?usp=sharing

# data[].attributes.body
https://drive.google.com/file/d/1YRM6KIrMzv01Rz-zua3Rwt5NA3EUe2W-/view

# data[].attributes.body
https://drive.google.com/file/d/1YRM6KIrMzv01Rz-zua3Rwt5NA3EUe2Wa/view

# data[].attributes.body
https://goku.to/

# data[].attributes.body
https://goku.to/watch-movie/watch-top-gun-maverick-5448/1253368

https://goku.to/watch-movie/watch-top-gun-maverick-5448/1253368

# data[].attributes.body
https://www.fushaar.info/page/7/

# data[].attributes.attachment_link.description
فشار | Fushaar مشاهده وتحميل لاحدث واخر الافلام وافلام البوكس اوفس مجانا وبدون اعلانات وبسيرفرات فشار الخاصة تحصل على افلام الاكشن, دراما , خيال علمي,كوميدي,افلام هندية وكورية , افلام رعب وجميع انواع الافلام , فشار اورج

# data[].attributes.body
https://youtu.be/sQSyofKyKIQ

# data[].attributes.attachment_link.title
GETTING STARTED with SketchUp Free - Lesson 2 - Creating a House Model