Erinevus lehekülje "Malware:ITX8042:2014:LAB5" redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
(Uus lehekülg: '== LAB5 == ===Additional Reading + presentations!=== [ Presentation1] ===Assignment=== ==== Write an incident report.==== Intsident report template [http://lambda.ee/w/ima...') |
|||
| (ei näidata sama kasutaja üht vahepealset redaktsiooni) | |||
| 3. rida: | 3. rida: | ||
===Additional Reading + presentations!=== | ===Additional Reading + presentations!=== | ||
| − | [ Presentation1] | + | [https://docs.google.com/presentation/d/1cMyy9naHZJrawHUAOhFGrvwoz6vevDPyQOeA9cezMkU/edit?usp=sharing Presentation1] |
| 10. rida: | 10. rida: | ||
==== Write an incident report.==== | ==== Write an incident report.==== | ||
| − | + | Incident report template [http://lambda.ee/w/images/1/1c/Turvaintsidendi_raporti_vorm_eng.doc Turvaintsidendi_raporti_vorm_eng.doc] | |
| − | OR use | + | OR use any other suitable template (Provide the origin for the template) |
| − | === Baseline for | + | === Baseline for incident reporting === |
| − | * 4 different | + | * 4 different computers are infected with malware you found in lab 3 |
| − | (you can choose which | + | (you can freely choose which computers are infected with witch malware.) |
* computers are located in different network segments | * computers are located in different network segments | ||
| − | * Company uses 2 different antivirus products | + | * Company uses 2 different antivirus products McAfee and Kaspersky (bought with computers) |
*[http://lambda.ee/w/images/1/14/4190827.png Company network layout] | *[http://lambda.ee/w/images/1/14/4190827.png Company network layout] | ||
| − | * Network consist clients with OS windows | + | * Network consist of clients with OS windows XP SP3, windows 8, windows 7. |
| 27. rida: | 27. rida: | ||
=== Timeline === | === Timeline === | ||
| − | * 6.oct.2014 17:00 User Juhan Karu | + | * 6.oct.2014 17:00 User Juhan Karu notices that his computer with win xp behaves in unusual way before shutting it down. |
| − | * 7.oct.2014 15:30 User Malle Maasikas mentioned | + | * 7.oct.2014 15:30 User Malle Maasikas mentioned that antivirus warned her about a website she visited with a Win 7 machine. |
| − | * | + | * Describe the following timeline (Use your imagination) |
Viimane redaktsioon: 15. oktoober 2014, kell 16:41
LAB5
Additional Reading + presentations!
Assignment
Write an incident report.
Incident report template Turvaintsidendi_raporti_vorm_eng.doc OR use any other suitable template (Provide the origin for the template)
Baseline for incident reporting
- 4 different computers are infected with malware you found in lab 3
(you can freely choose which computers are infected with witch malware.)
- computers are located in different network segments
- Company uses 2 different antivirus products McAfee and Kaspersky (bought with computers)
- Company network layout
- Network consist of clients with OS windows XP SP3, windows 8, windows 7.
Timeline
- 6.oct.2014 17:00 User Juhan Karu notices that his computer with win xp behaves in unusual way before shutting it down.
- 7.oct.2014 15:30 User Malle Maasikas mentioned that antivirus warned her about a website she visited with a Win 7 machine.
- Describe the following timeline (Use your imagination)