Erinevus lehekülje "Malware:ITX8042:2014:LAB5" redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
| 3. rida: | 3. rida: | ||
===Additional Reading + presentations!=== | ===Additional Reading + presentations!=== | ||
| − | [ Presentation1] | + | [https://docs.google.com/presentation/d/1cMyy9naHZJrawHUAOhFGrvwoz6vevDPyQOeA9cezMkU/edit?usp=sharing Presentation1] |
Viimane redaktsioon: 15. oktoober 2014, kell 16:41
LAB5
Additional Reading + presentations!
Assignment
Write an incident report.
Incident report template Turvaintsidendi_raporti_vorm_eng.doc OR use any other suitable template (Provide the origin for the template)
Baseline for incident reporting
- 4 different computers are infected with malware you found in lab 3
(you can freely choose which computers are infected with witch malware.)
- computers are located in different network segments
- Company uses 2 different antivirus products McAfee and Kaspersky (bought with computers)
- Company network layout
- Network consist of clients with OS windows XP SP3, windows 8, windows 7.
Timeline
- 6.oct.2014 17:00 User Juhan Karu notices that his computer with win xp behaves in unusual way before shutting it down.
- 7.oct.2014 15:30 User Malle Maasikas mentioned that antivirus warned her about a website she visited with a Win 7 machine.
- Describe the following timeline (Use your imagination)