All language subtitles for 2. Cyber Kill Chain Questions

Cyber chain is one of the most important question which is asked in the interview.

So let me discuss about that.

What is the difference between Cyber Keychain and Miter TEC?

But before that, let's see what actually the cyber kill chain and what are the phrases we have.

So in cyber kill chain, we have about seven phases.

Exactly.

The number one, we have requirements, weaponization delivery, exploration, installation, command

and control, and then action and objectives.

And so these are the seven stages.

So here are seven tactics, you can say.

And in my attack, there was 14.

Now.

Okay.

One question generally has by always by the interviewer that can you please elaborate your word incident

case in the form of cyber keychain.

So basically what what actually the interview is are asking to you that if you have done any any type

of you know, investigation on malware or you have done any incident in your previous organization,

then are you able to explore or are you able to tell those investigations in the form of cyber kill

chain process?

Let's say if let me take give you an example.

Let's say I worked on Emotet malware, right?

So what I will do is I recommends what attacker will do with Emotet.

So as a recurrence, definitely we need one of the email ID of the user.

Right.

So of the organization.

So that is what recommends weaponization is I am creating the mail delivery that I'm sending the mail

to that user exploitation.

The user is clicking on that attachment installation.

Once it will click on that, it is going to install and it will after that it will communicate for the

command and control and then action objectives means whatever I want.

Why, if I want to steal the data, I can do so.

This is how actually it works.

So these two questions are very important.

Apart from that, the difference between cyber kill chain and my attack.

So now see here both both are similar.

What what their aim is they have to get in, right.

And they don't want to court and they want to get out.

Definitely they want to steal the data.

These three things, they have the similarity.

But the difference is that cyber kill chain is the step by step process, whereas minor attack is not.

If there is some initial access is happening after person, let's say privilege escalation after privilege

escalation.

It is not mandated that they will go for the persistence.

They can go for the little moment.

So the techniques, I mean that is not a sequence wise.

And whereas a cyber kill is sequence sequence wise.

So this is what the basic difference between cyber kill chain and miter attack.